AdwCleaner updates and discussion thread

Discussion in 'other anti-malware software' started by FanJ, Apr 18, 2013.

  1. gerardwil

    gerardwil Registered Member

    Joined:
    Jan 17, 2004
    Posts:
    4,750
    Location:
    EU
    @FanJ: PM sent
     
  2. emmjay

    emmjay Registered Member

    Joined:
    Jan 26, 2010
    Posts:
    1,540
    Location:
    Triassic
    You are right. Just checked it out. Tnx.
     
  3. Snoop3

    Snoop3 Registered Member

    Joined:
    Jan 2, 2011
    Posts:
    474
    if you use a program like SmartSniff you can see that some of these adware crud has already collected data on your system and sent it over the internet before you even have a chance to uncheck those boxes.
     
  4. 1PW

    1PW Registered Member

    Joined:
    Apr 2, 2010
    Posts:
    1,910
    Location:
    North of the 38th parallel.
    Last edited by a moderator: Aug 29, 2013
  5. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    4,638
    Version 3.0.0.3 has recently been released.
    MD5 checksum - 720CBF9C4E60540122BED3EA8CC0EAAC

    Instructions for version 3.xxx can be found here:
    http://general-changelog-team.fr/en.../securite/311-utiliser-adwcleaner-version-3-x
    These instructions are in French. I don't know whether there are also instructions in English.

    ===

    I am confused why it now flags the following folder on my XP-home SP3:
    C:\Documents and Settings\user\IECompatCache
    There's just one of those index.dat files.
    Do you guys get a similar warning?
     
  6. 1PW

    1PW Registered Member

    Joined:
    Apr 2, 2010
    Posts:
    1,910
    Location:
    North of the 38th parallel.
    Hi FanJ:

    No. Attached is the v3.003 result from one of my systems. YMMV

    HTH :)

    View attachment AdwCleaner[R4].txt
     
  7. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    4,638
    I have no idea why AdwCleaner is saying in its logfile that it "found" Folder C:\Documents and Settings\XXX\IECompatCache while it cleans (if you let it clean) the index.dat file in that Folder. It it thinks that that index.dat file is not "clean", it should say so also in its logfile. It's not consistent.

    I have no idea why AdwCleaner is thinking that that index.dat file is not clean. I really have not the slightest idea.
    My settings combined with the index.dat cleaning by CCleaner should take care of cleaning that index.dat file.
    I have opened that index.dat file in NotePad; nothing wrong to see there as far as I am aware.
    I have used Index.dat Analyzer (from here). I don't see anything wrong as far as I am aware.

    I have manually added that index.dat file in the "include" in CCleaner, then run CCleaner, then only go to Wilders. Adwcleaner still thinks it should be cleaned.
    I have compared that index.dat file (using Beyond Compare) with a stored one. I don't see a difference.

    Could I be wrong? Yes, of course I can be wrong.

    Oh, how I wish IEClean were here. Oh, those good old days with IEClean (from Kevin and Nancy); one of my most loved programs.
     
  8. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    4,638
  9. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands
    It's very likely a FP:

     
  10. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    4,638
    Hi Ton,

    Thank you!

    PS: neither MBAM nor NOD32 is flagging it.

    Groeten,
    Jan
     
  11. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    4,638
    Version 3.0.0.4 has been released.

    It's fixed. No more flagging on my XP of that folder C:\Documents and Settings\user\IECompatCache nor that index.dat file in that folder.

    Big thanks to Xplode for this great program and the quick fix ! :thumb:

    Thanks to you too, Ton !
     
  12. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    4,638
    Version 3.0.0.5 has been released recently.
    Thanks Xplode !
     
  13. Dragon1952

    Dragon1952 Registered Member

    Joined:
    Sep 16, 2012
    Posts:
    2,469
    Location:
    Hollow Earth - Telos
    Should i clean any of this stuff.........***** [ Services ] *****

    Service Found : Application Updater

    ***** [ Files / Folders ] *****

    Folder Found C:\Program Files (x86)\Application Updater
    Folder Found C:\Program Files (x86)\Common Files\spigot
    Folder Found C:\Program Files (x86)\IObit Apps Toolbar
    Folder Found C:\ProgramData\baidu
    Folder Found C:\Users\Bruce\AppData\LocalLow\Search Settings
    Folder Found C:\Users\Bruce\AppData\Roaming\baidu

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Key Found : HKCU\Software\AppDataLow\Software\Search Settings
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
    Key Found : HKCU\Software\Search Settings
    Key Found : [x64] HKCU\Software\Search Settings
    Key Found : HKLM\Software\Application Updater
    Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
    Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
    Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
    Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
    Key Found : HKLM\SOFTWARE\Classes\ScriptHost.Tool
    Key Found : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
    Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
    Key Found : HKLM\Software\Search Settings
    Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
    Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]

    ***** [ Browsers ] *****

    -\\ Internet Explorer v9.0.8112.16514


    -\\ Google Chrome v30.0.1599.101

    [ File : C:\Users\Bruce\AppData\Local\Google\Chrome\User Data\Default\preferences ]
     
  14. Dragon1952

    Dragon1952 Registered Member

    Joined:
    Sep 16, 2012
    Posts:
    2,469
    Location:
    Hollow Earth - Telos
    I have Application Updater running as a Service...Might not be a good thing..-http://cleanbytes.net/spigot-applicationupdater-exe-
     
    Last edited by a moderator: Oct 22, 2013
  15. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    4,638
  16. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    4,638
  17. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands
    They're all adware and PUP traces, and it's safe to have AdwCleaner remove them.

    As Jan already mentioned, after that, you should still go to BC, Malwarebytes, or another reputable board for a complete check-up, as there will be more that needs removing
     
  18. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    4,638
    Hi Ton,

    Thanks a lot for jumping in (and confirming what I was thinking)!
    Your input is always very, very much appreciated :thumb: :thumb:

    Warmest regards,
    Jan
     
  19. Dragon1952

    Dragon1952 Registered Member

    Joined:
    Sep 16, 2012
    Posts:
    2,469
    Location:
    Hollow Earth - Telos
    A scan found this to be cleaned..[ File : C:\Users\Bruce\AppData\Local\Google\Chrome\User Data\Default\preferences ]
     
  20. Gandalf_The_Grey

    Gandalf_The_Grey Registered Member

    Joined:
    Jan 31, 2012
    Posts:
    1,188
    Location:
    The Netherlands
    I also always see that same detection...
    Wondering what that is about.
     
  21. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,627
    That is the Chrome config file. Maybe there are some entries in it which need to cleaned?
     
  22. Gandalf_The_Grey

    Gandalf_The_Grey Registered Member

    Joined:
    Jan 31, 2012
    Posts:
    1,188
    Location:
    The Netherlands
    Thanks for the information. But why has it to be cleaned every run of AdwCleaner? One time should be enough.
     
  23. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,627
    I missed that bit. Sounds like a false positive.
     
  24. AlexC

    AlexC Registered Member

    Joined:
    Apr 4, 2009
    Posts:
    1,288
    I think that deleting that file will reset Chrome to defaults. The user settings, cookies, history, extentions, etc. are erased, and the file is re-created the next time Chrome starts.
     
  25. ance

    ance formerly: fmon

    Joined:
    May 5, 2013
    Posts:
    1,360
    Is it as good as Malwarebytes or Hitman Pro? Is the computer infected? :doubt:
     

    Attached Files:

    • adwc.png
      adwc.png
      File size:
      12.5 KB
      Views:
      263
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.