Re: Can anyone help me identify if any of these deleted registry keys are essential

Greetings,

First of all, sorry for the late answer.

Can you share the scan logfile as well? Thanks.

Regards.


cocochepeau, 2017-09-19 06:55:31 (UTC)

# AdwCleaner 7.0.2.1 - Logfile created on Sun Sep 10 01:05:26 2017 # Updated on 2017/29/08 by Malwarebytes  # Database: 09-08-2017.1 # Running on Windows 7 Home Basic (X64) # Mode: scan # Support: https://www.malwarebytes.com/support

***** [...

Can anyone help me identify if any of these deleted registry keys are essential for windows?

# AdwCleaner 7.0.2.1 - Logfile created on Sun Sep 10 01:06:01 2017 # Updated on 2017/29/08 by Malwarebytes  # Running on Windows 7 Home Basic (X64) # Mode: clean # Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

Deleted: C:\Users\lenovo\AppData\Local\Bundled software uninstaller Deleted: C:\Users\lenovo\AppData\Ro...

Re: Is this a false positive?

on AdwCleaner by Nec

The fact that this is Spanish(Maybe?) makes it very VERY difficult to read.... Any way you could turn it into English? On the first glance noticed some things that MIGHT be potential issues, unsure, cause..... I am not yet used to reading the logs, and different language doesn't help the issue :)


JoshRoss, 2017-09-07 14:26:07 (UTC)

Of course sorry.

If you see something that is not translat...

Re: Is this a false positive?

on AdwCleaner by Nec

Ports, applications, accessibility. Maybe your other device is used a lot less, you haven't messed with any ports or have any applications that require forwarding. Honestly, very weird issue, I would need to investigate the files. Can you scan your PC With Farbar MiniToolBox and Malwarebytes JRT? Post the logs that you get.


JoshRoss, 2017-09-06 13:16:38 (UTC)

MiniToolBox by Farbar  Version...

Re: False Positives V7

Herewith registry log:

***** [ Registry ] *****

PUP.Optional.SavepathDeals, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F66C7EC4-63CC-4452-A8C9-5A2E898F8EFF} PUP.Optional.SavepathDeals, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F8698E62-9284-432A-9C62-C1293A2B1DD3} Adware.BrowseFox, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\A...

My First Post: Are These Internet Explorer\ActiveX Compatibility Entries False Positives

# AdwCleaner 7.0.1.0 - Logfile created on Thu Aug 24 18:42:33 2017

# Updated on 2017/05/08 by Malwarebytes # Database: 08-22-2017.4 # Running on Windows 7 Professional (X64) # Mode: scan # Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

...

More false positives

# AdwCleaner 7.0.1.0 - Logfile created on Fri Aug 04 17:28:24 2017 # Updated on 2017/05/08 by Malwarebytes # Database: 07-31-2017.1 # Running on Windows 7 Ultimate (X64) # Mode: scan # Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Adware.Heuristic, C:\ProgramData\{057DC76A-EA02-4CB2-AD10-10F4D94320D6} PUP.Adwa...

False positives?

Are these keys FPs? Could someone verify this? Thank you.

# AdwCleaner 7.0.0.0 - Logfile created on Sun Jul 23 10:21:28 2017 # Updated on 2017/17/07 by Malwarebytes # Database: 07-16-2017.1 # Running on Windows 7 Home Premium (X86) # Mode: scan # Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders...

Re: Version 7 FPs (262 elements)

I have no proxies on either machine.

Just updated and ran scan - still same result as yesterday as below - 280 entires found!

The Chrome entries found are simply my personalisations for the Chrome start up page! Should definately not be selected or cleaned!

# AdwCleaner 7.0.0.0 - Logfile created on Fri Jul 21 08:26:44 2017 # Updated on 2017/17/07 by Malwarebytes # Database: 07-16-2017.1 # Ru...

Re: Version 7 FPs (262 elements)

sure, these are immunization entries detected from SpywareBlaster by AdwCleaner.

# AdwCleaner 7.0.0.0 - Logfile created on Fri Jul 21 15:18:41 2017 # Updated on 2017/17/07 by Malwarebytes # Database: 07-16-2017.1 # Running on Windows 7 Ultimate (X64) # Mode: scan # Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No...