AdwCleaner updates and discussion thread

v4.102 - 24/11/14
- no changelog (as of now)

Changes:
http://general-changelog-team.fr/~xplode/Changelogs/CG_AdwCleaner_EN.txt
Download:
https://toolslib.net/downloads/viewdownload/1-adwcleaner/

 

v4.106 - 21/12/14
- no changelog (as of now)

Changes/download:
https://toolslib.net/downloads/viewdownload/1-adwcleaner/

There have been many releases in between. Check out the changelog for up to 4.105

 

I tried to download this and i got this...
Description:
Stopped working
Problem signature:
Problem Event Name: APPCRASH
Application Name: CCC.exe
Application Version: 3.5.0.0
Application Timestamp: 4ca242ed
Fault Module Name: mscorwks.dll
Fault Module Version: 2.0.50727.5485
Fault Module Timestamp: 53a11d6c
Exception Code: c0000005
Exception Offset: 000000000019597f
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033
Read our privacy statement online:
http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409
If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt ................After this WSA Blocked this..ed41.tmp in C:\users\xxxx\downloads

 

Safe Browsing
Diagnostic page for toolslib.net
What is the current listing status for toolslib.net?

This site is not currently listed as suspicious.

What happened when Google visited this site?

Of the 2550 pages we tested on the site over the past 90 days, 0 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2015-01-17, and the last time suspicious content was found on this site was on 2015-01-17.
Malicious software includes 214 trojan(s), 84 virus, 54 exploit(s).

This site was hosted on 1 network(s) including AS16276 (OVH).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, toolslib.net did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

Yes, this site has hosted malicious software over the past 90 days. It infected 0 domain(s), including .
​

 

Download: https://toolslib.net/downloads/viewdownload/1-adwcleaner/

As is the case with many malware removal tools, various AV and AM applications will frequently find fault (FP) with AdwCleaner. I can not remember when AdwCleaner wasn't singled out as such. Not surprisingly, and with the release of v4.108, AdwCleaner scores 1/57 on the VirusTotal site.

HTH

 

For those socially inclined - they are on Twitter: https://twitter.com/toolslib

 

v4.109 - 24/01/15
[Database] - Added local database v24-01-2015.3
[Proxy] - New proxy detection
[Paths] - Added "Favorites\Links" to handled paths
[Bug] - Fixed duplicate entries in the logfile
[Generic.Maintainer] - Added generic detection
[Generic.Sambreel] - Generic detection updated
[Generic.Multiplug] - Generic detection updated
[Chrome] - Chrome Canary added to handled browsers

Changes:
http://general-changelog-team.fr/~xplode/Changelogs/CG_AdwCleaner.txt
Download:
https://toolslib.net/downloads/viewdownload/1-adwcleaner/

 

The ToolsLib folks have told me via Twitter they are preparing to launch a Blog -

When this will happen and what it will be I am not aware but it should beat the current changes via a text file although it serves it's purpose it would help to get a more modern interface with their user community.

 

Thank you Silj. That's good news.

 

The latest trend in the awful Windows ecosystem is pretty ridiculous — scammers have a fake version of the reputable AdwCleaner tool, which is a real tool for Windows experts. And this one pretends your computer is infected and tries to make you pay them to remove it.......http://www.howtogeek.com/209654/

 

https://www.wilderssecurity.com/thr...wcleaner-in-active-scareware-campaign.373388/

 

Is it safe to delete this?

 

you can copy such things from the concerning AdwCleaner[Rx].txt, no need for a screenshot which looks awful as preview.

from my view: ok to delete - i dont get this line on win7.

 

//////// v4.112 - 09/03/15 ////////

[Database] - Added local database v05-03-2015.1
[Language] - Added Italian translation
[Language] - Added Russian translation
[Language] - Added Dutch translation
[Language] - Added Japanese translation
[Generic] - Fixed false positive
[EULA] - Typo corrections

https://toolslib.net/downloads/viewdownload/1-adwcleaner/ or auto self update.

VT: 6/57

 

//////// v4.113 - 22/03/15 ////////

[Database] - Added local database v22-03-2015.2
[Generic.Tuto4PC] - Generic detection updated
[Generic.Crossrider] - Generic detection updated
[Generic.AddLyrics] - Generic detection updated
[Language] - Added Spanish translation
[Language] - Fixes in Russian translation
[Tasks] - Generic detection updated
[Chrome] - Added "ExtensionWhitelist" to managed keys
[Paths] - Added StartMenuCommonDir to handled paths
[Paths] - Added config\systemprofile\Documents to handled paths
[Generic] - Updated generic registry detections
[Winsock] - Added Winsock cleaning
[Processes] - Whitelisted Splashtop processes
[GUI] - Fixed error in progression percentage increase
[Generic.PullUpdate] - Added generic detection

https://toolslib.net/downloads/viewdownload/1-adwcleaner/ or auto self update.

VT: 1/57

 

//////// v4.200 - 29/03/15 ////////

[Database] - Added local database v29-03-2015.1
[Language] - Added Estonian translation
[Language] - Added Czech translation
[Language] - Added Brazilian portuguese translation
[Optimization] - Reduced database loading time (~15s -> ~2s)
[Optimization] - Multiplug generic detection optimized
[Optimization] - Database cleanup ( part 1 )
[Generic.Conduit] Generic detection added
[Generic.AddLyrics] - Generic detection updated
[Generic.Crossrider] - Generic detection updated
[Processes] - Added a more powerful way to kill processes
[Bug] - Fixed display in the logfile ( infected shortcuts )
[Chrome] - Preferences detection improved

https://toolslib.net/downloads/viewdownload/1-adwcleaner/ or self update.

VT: 0/56

 

//////// v4.201 - 08/04/15 ////////

[Database] - Added local database v08-04-2015.1
[Language] - AdwCleaner now detects language of current MUI pack
[Paths] - Added config\systemprofile\AppData\Local to handled paths
[Generic.Conduit] - Generic detection updated
[Generic.Skintrim] - Generic detection updated
[Firefox] - Added new generic detection for adware related JS scripts
[Proxy] - Proxy detection improved ( more checked keys )

https://toolslib.net/downloads/viewdownload/1-adwcleaner/

 

//////// v4.202 - 23/04/15 ////////

[Database] - Added local database v23-04-2015.1
[GUI] - Message box displaying improved
[Generic] - Generic detections updated
[Generic.Tuto4PC] - Generic detection updated
[Generic.Multiplug] - Generic detection updated
[Generic.BetterSurf] - New generic detection

https://toolslib.net/downloads/viewdownload/1-adwcleaner/

 

//////// v4.203 - 30/04/15 ////////

[Database] - Added local database v30-04-2015.2
[Optimization] - Database cleanup ( part 2 )
[Generic.MyWebSearch] - New generic detection
[Generic.Netfilter] - New generic detection

https://toolslib.net/downloads/viewdownload/1-adwcleaner/ or self update.

VT: 0/54

 

Is something wrong with this version?
As soon as I start it, it says that my version is outdated and redirects me to their homepage...

 

Nothing is wrong with this version. I had the same problem this morning. It's got something to do with the fact that their servers hadn't been updated yet. What you and I downloaded earlier today was not the latest version, it was v4.202. Their servers seem to be up to date now, so just follow 1PW's link and you will get the latest version of AdwCleaner.

 

Thanks! Will try later...

 

//////// v4.204 - 12/05/15 ////////

[Database] - Added local database v12-05-2015.2
[Generic.Netfilter] - Typo mistake fixed
[Generic.Multiplug] - Generic detection updated
[Generic] - Generic detections updated
[Other] - Changed way to detect current version

https://toolslib.net/downloads/viewdownload/1-adwcleaner/ or self update.

VT: 1/57

 

//////// v4.205 - 21/05/15 ////////

[Database] - Added local database v21-05-2015.2
[Database] - Bug fixed ( Database's downloading now forces a reload from the remote site )
[Language] - Added Polish translation
[Generic.Crossrider] - Generic detection updated
[Generic.BetterSurf] - Generic detection updated
[Generic] - Generic detections updated

https://toolslib.net/downloads/viewdownload/1-adwcleaner/ or self update.

VT: 1/56

 

what about those here?
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance\{1932C124-77DA-4151-99AA-234FEA09F463}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance\{3E0FA044-926C-42D9-BA12-EF16E980913B}]

recovered it today from this software
http://the-undelete.com/undelete.php

seems like every program of them is stamping the trial with it, google points it out as "Trace.Registry.ares!E1"
(ares is another /for me unknown/ software)

i am thinking about a reverse search.

i'd queried my real system for
"FriendlyName"="AsyncEx"
and
"FriendlyName"="GDCL WMV/WMA Parser"

and found nothing. ofc these names are legitimate they are fake in this combination.