@cocochepeau Hi, As, after AdwCleaner requested to restart the computer after scan and clean, I was not able to log in anymore into the standard account from where I ran AdwCleaner, Therefore I didn't get the report, but I guess it should still be somewhere on my computer. I ran again AdwCleaner but with starting the scan, just to see if it sees the report, but the Report button is grayed out. I downloaded several versions of AdwCleaner, so I may not ran the same version. I don't know if that matters. On the other hand, if I press uninstall (without actually starting the uninstall) I see the files from the quarantine, but not the changes made to the registry. For the files you may take a look at: http://1drv.ms/16uCsum
@cocochepeau
Here are most of the entries I could find. I believe the Hotspot Shield drivers might be the culprit. One user had a driver inside Device Manager. Replacing that driver with one from another working computer seems to have corrected the connection issue.
Folder Deleted : C:\ProgramData\hotspot shield
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hotspot shield
Folder Deleted : C:\Program Files (x86)\hotspot shield
Folder Deleted : C:\Windows\SysWOW64\hotspot shield
File Deleted : C:\Windows\System32\drivers\taphss6.sys
File Deleted : C:\Windows\System32\drivers\hssdrv6.sys
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\hotspotshield
Key Deleted : HKLM\SOFTWARE\hotspotshield
Key Deleted : HKCU\Software\anchorfree
Folder Found : C:\Users\Sid\AppData\Roaming\hotspot shield
Folder Found : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\hotspot shield
This latest version has many false positives. In favorites, i have a folder name 'online' it is detecting that folder. In registry, it is detecting IDM helper addon for IE (I have Internet download manager installed). In firefox, it is detecting an addon xpi file 'SuperDrag', i have been using this addon for months it is not a adware. Please fix this problems if possible.
Thanks a lot for this superb program.
After running you program the only things I could see listed were the files under the files tab. I selected them and selected the clean button. Your program cleaned them, closed my computer and rebooted. All seemed well until I went into my task manager. To my surprise under the processes tab, 82 Background Processes were listed in addition to 5 Apps. Many seemed to be duplicates (25) (Google Chrome (32 bit). Is this normal? Was it a mistake to delete those files? If so can it be reversed? If not why wasn't there a strong warning stating the consequences?
Couldn't remember password..so I made a new account.
@cocochepeau I emailed VIPRE about 2 days ago, and yes they confirmed: IT IS A FALSE POSITIVE. They said to make sure your software has the newest VIPRE definitions to the latest version (36814 or higher) and scan the file again...it found no threats to Adwcleaner.
So, it is safe to use!
New Malware
===========
Name: Searchult
Action: Change home page of Firefox/Chrome
Location: %UserProfile%\AppData\Roaming\Macwebtoise
*Need to close explorer.exe to disinfect
Good Morning!
I'm trying to uninstall your program. I'm assuming it's a single use program, that is download it when you need it, then, delete it. I'm afraid I don't understand your above term "using the 'mode uninstall.'
I see Adware in my downloads file, but there's no uninstaller. It's not listed in "Programs & Features," so I can't uninstall from there.
I'm trying to get numerous SearchScopes entries OUT of my registry. While I successfully downloaded & ran Adware from Bleeping Computer this morning, when I tried to download from your site, Sonar blocked it. I don't know what Sonar is, so I figure I'd better uninstall, clean out Adware, and do some reading before I try again.
Is the "mode uninstall" a new term/function? Can someone help me understand,please? Appreciativley...
My adwcleaner failed to remove Vosteran Search which pops up 3 tabs for every one chrome tab. I haven't downloaded any private or personal files on this new computer.....only windows and McAfee updates have been entered. McAfee sent me to adwcleaner. Interesting but also not successful. Help.
Hello,
Everytime when I do a Scan, I get this thing:
***** [ Taken ] *****
Taak Gevonden : Dealply
Taak Gevonden : DealPlyUpdate
Taak Gevonden : Express FilesUpdate
Taak Gevonden : globalUpdateUpdateTaskMachineCore
Taak Gevonden : globalUpdateUpdateTaskMachineUA
Taak Gevonden : Searchya
I never get ride of it, it always return.
What do I have to do to get ride of it?
Please help!!!!
There are two wrong definitions in the database, please correct that.
***** [ Files / Folders ] *****
Folder Found : C:\Users\%User%\AppData\Roaming\Mozilla\Firefox\Profiles\0ct1cmlj.default\Extensions\{4cc4a13b-94a6-7568-370d-5f9de54a9c7f}
Folder Found : C:\Users\%User%\AppData\Roaming\Mozilla\Firefox\Profiles\0ct1cmlj.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
Those are two firefox plugins:
Download Helper: https://addons.mozilla.org/bg/firefox/addon/video-downloadhelper/
Empty Cache Button: https://addons.mozilla.org/bg/firefox/addon/empty-cache-button/
Of course check that.
I'm running Windows 8.1 Enterprise (x86), Firefox 34.0;
I've donated you three times.
Do that and there will be a fourth.
Thank you!
