AdwCleaner Scan Result?

Page 1 of 2 12 LastLast

  1. Posts : 7,871
    Windows 11 Pro 64 bit
       #1

    AdwCleaner Scan Result?


    I just upgraded to the latest version of AdWCleaner and all my PCs give the detection shown below whereas they scanned clean a few days ago. What's the detection due to?
    Attachment 269990
      My Computers


  2. Posts : 197
    Windows 11 Home
       #2

    Steve C said:
    I just upgraded to the latest version of AdWCleaner and all my PCs give the detection shown below whereas they scanned clean a few days ago. What's the detection due to?
    It's quite old (2014), but looks like it might be this bad addon: (or traces of it)

    Remove SearchScopes | MalwareFixes

    or it could be this slightly updated variant:

    https://forums.malwarebytes.com/topi...search-option/

    Install or update any free new software lately? If you have chrome or firefox it would have synced the extension which would explain how it ended up on all your pc's.

    Does it show under extensions in any of your web browsers?

    Kind of ironic defender did not find this, unless it's a false positive.
      My Computer


  3. Posts : 7,871
    Windows 11 Pro 64 bit
    Thread Starter
       #3

    Andrew129260 said:
    It's quite old (2014), but looks like it might be this bad addon: (or traces of it)

    Remove SearchScopes | MalwareFixes

    or it could be this slightly updated variant:

    https://forums.malwarebytes.com/topi...search-option/

    Install or update any free new software lately? If you have chrome or firefox it would have synced the extension which would explain how it ended up on all your pc's.

    Does it show under extensions in any of your web browsers?

    Kind of ironic defender did not find this, unless it's a false positive.
    I've never installed that add-on in any browser. All PCs scanned fine last week using the previous version of AdwCleaner. No new software has been installed. The only obvious difference is using the new version of AdwCleaner.
      My Computers


  4. 1PW
    Posts : 369
    W10
       #4

    Hello @Steve C

    Other Malwarebytes AdwCleaner 8.0.3.0 users have briefly under reported the registry PUP detection.

    However, no users have provided the complete follow-up requested data with which to definitively investigate the detection.

    The required data may be derived by following the procedure within https://forums.malwarebytes.com/topi...omment=1366505

    If you would like to contribute the necessary troubleshooting report, please open your own Malwarebytes forum topic at:

    https://forums.malwarebytes.com/foru...leaner/?do=add

    You may always choose to quarantine the detection, and later restore at your discretion if the detection is a false positive.

    Thank you in advance.
      My Computers


  5. Posts : 31,471
    10 Home x64 (22H2) (10 Pro on 2nd pc)
       #5

    Steve C said:
    I just upgraded to the latest version of AdWCleaner and all my PCs give the detection shown below whereas they scanned clean a few days ago. What's the detection due to?
    I get just one detection on a recent clean install of 1909, it says it's the...
    PUP.Optional.SearchBoxDS HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

    That key is for Microsoft's Bing search, apparently.

    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
    "DisplayName"="Bing"
    "FaviconURLFallback"="http://www.bing.com/favicon.ico"
    "FaviconURL"="http://www.bing.com/favicon.ico"
    "URL"="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02"
    "SuggestionsURLFallback"="http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IESS02&market={language}"
    "SuggestionsURL"="http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IESS02&market={language}"
    "NTURL"="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IENTSR"
    "NTTopResultURL"="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IENTTR"
    "NTSuggestionsURL"="http://api.bing.com/qsml.aspx?query={searchTerms}&market={language}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IENTSS"
    "NTLogoPath"="C:\\Users\\Owner\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\"
    "NTLogoURL"="http://go.microsoft.com/fwlink/?LinkID=403856&language={language}&scale={scalelevel}&contrast={contrast}"
      My Computers


  6. Posts : 7,871
    Windows 11 Pro 64 bit
    Thread Starter
       #6

    Bree said:
    I get just one detection on a recent clean install of 1909, it says it's the...
    PUP.Optional.SearchBoxDS HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

    That key is for Microsoft's Bing search, apparently.

    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
    "DisplayName"="Bing"
    "FaviconURLFallback"="http://www.bing.com/favicon.ico"
    "FaviconURL"="http://www.bing.com/favicon.ico"
    "URL"="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02"
    "SuggestionsURLFallback"="http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IESS02&market={language}"
    "SuggestionsURL"="http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IESS02&market={language}"
    "NTURL"="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IENTSR"
    "NTTopResultURL"="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IENTTR"
    "NTSuggestionsURL"="http://api.bing.com/qsml.aspx?query={searchTerms}&market={language}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IENTSS"
    "NTLogoPath"="C:\\Users\\Owner\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\"
    "NTLogoURL"="http://go.microsoft.com/fwlink/?LinkID=403856&language={language}&scale={scalelevel}&contrast={contrast}"
    Thanks - I get the impression this is a false positive detected by AdwCleaner v 8.0.3
      My Computers

  7.   My Computers


  8. Posts : 7,871
    Windows 11 Pro 64 bit
    Thread Starter
       #8

    I have no such extension
      My Computers


  9. Posts : 928
    Win 10
       #9

    Steve C said:
    I have no such extension
    Then let it clean it if you have not already done so. If you already did and it keeps coming back then that is different. But as you said it might be a FP. We will have to wait and see.

    Side note, Even though I am a MB user seller and supporter, I have never had a reason to run ADW cleaner on any machine I touch and do not plan to. It has its purpose but I have never felt the need especially since the addition of OEM bloatware detection. I have other means of dealing with that.
      My Computers


  10. Posts : 928
    Win 10
       #10

    I have tagged a staff member over on the MB forum to look into the issue. Let's wait till then.
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 06:27.
Find Us




Windows 10 Forums