AdwCleaner Scan Result?

Page 1 of 2 12 LastLast
  1. Steve C's Avatar
    Posts : 6,278
    Windows 10 Pro 64 bit
       #1

    AdwCleaner Scan Result?


    I just upgraded to the latest version of AdWCleaner and all my PCs give the detection shown below whereas they scanned clean a few days ago. What's the detection due to?
    Attachment 269990
      My Computers

  2. Andrew129260's Avatar
    Posts : 191
    Windows 10 Pro x64 latest version
       #2

    Steve C said:
    I just upgraded to the latest version of AdWCleaner and all my PCs give the detection shown below whereas they scanned clean a few days ago. What's the detection due to?
    It's quite old (2014), but looks like it might be this bad addon: (or traces of it)

    Remove SearchScopes | MalwareFixes

    or it could be this slightly updated variant:

    https://forums.malwarebytes.com/topi...search-option/

    Install or update any free new software lately? If you have chrome or firefox it would have synced the extension which would explain how it ended up on all your pc's.

    Does it show under extensions in any of your web browsers?

    Kind of ironic defender did not find this, unless it's a false positive.
      My Computers

  3. Steve C's Avatar
    Posts : 6,278
    Windows 10 Pro 64 bit
    Thread Starter
       #3

    Andrew129260 said:
    It's quite old (2014), but looks like it might be this bad addon: (or traces of it)

    Remove SearchScopes | MalwareFixes

    or it could be this slightly updated variant:

    https://forums.malwarebytes.com/topi...search-option/

    Install or update any free new software lately? If you have chrome or firefox it would have synced the extension which would explain how it ended up on all your pc's.

    Does it show under extensions in any of your web browsers?

    Kind of ironic defender did not find this, unless it's a false positive.
    I've never installed that add-on in any browser. All PCs scanned fine last week using the previous version of AdwCleaner. No new software has been installed. The only obvious difference is using the new version of AdwCleaner.
      My Computers

  4. 1PW's Avatar
    1PW
    Posts : 180
    W10
       #4

    Hello @Steve C

    Other Malwarebytes AdwCleaner 8.0.3.0 users have briefly under reported the registry PUP detection.

    However, no users have provided the complete follow-up requested data with which to definitively investigate the detection.

    The required data may be derived by following the procedure within https://forums.malwarebytes.com/topi...omment=1366505

    If you would like to contribute the necessary troubleshooting report, please open your own Malwarebytes forum topic at:

    https://forums.malwarebytes.com/foru...leaner/?do=add

    You may always choose to quarantine the detection, and later restore at your discretion if the detection is a false positive.

    Thank you in advance.
      My Computers

  5. Bree's Avatar
    Posts : 18,610
    10 Home x64 (20H2) (10 Pro on 2nd pc)
       #5

    Steve C said:
    I just upgraded to the latest version of AdWCleaner and all my PCs give the detection shown below whereas they scanned clean a few days ago. What's the detection due to?
    I get just one detection on a recent clean install of 1909, it says it's the...
    PUP.Optional.SearchBoxDS HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

    That key is for Microsoft's Bing search, apparently.

    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
    "DisplayName"="Bing"
    "FaviconURLFallback"="http://www.bing.com/favicon.ico"
    "FaviconURL"="http://www.bing.com/favicon.ico"
    "URL"="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02"
    "SuggestionsURLFallback"="http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IESS02&market={language}"
    "SuggestionsURL"="http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IESS02&market={language}"
    "NTURL"="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IENTSR"
    "NTTopResultURL"="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IENTTR"
    "NTSuggestionsURL"="http://api.bing.com/qsml.aspx?query={searchTerms}&market={language}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IENTSS"
    "NTLogoPath"="C:\\Users\\Owner\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\"
    "NTLogoURL"="http://go.microsoft.com/fwlink/?LinkID=403856&language={language}&scale={scalelevel}&contrast={contrast}"
      My Computers

  6. Steve C's Avatar
    Posts : 6,278
    Windows 10 Pro 64 bit
    Thread Starter
       #6

    Bree said:
    I get just one detection on a recent clean install of 1909, it says it's the...
    PUP.Optional.SearchBoxDS HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

    That key is for Microsoft's Bing search, apparently.

    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
    "DisplayName"="Bing"
    "FaviconURLFallback"="http://www.bing.com/favicon.ico"
    "FaviconURL"="http://www.bing.com/favicon.ico"
    "URL"="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02"
    "SuggestionsURLFallback"="http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IESS02&market={language}"
    "SuggestionsURL"="http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IESS02&market={language}"
    "NTURL"="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IENTSR"
    "NTTopResultURL"="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IENTTR"
    "NTSuggestionsURL"="http://api.bing.com/qsml.aspx?query={searchTerms}&market={language}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IENTSS"
    "NTLogoPath"="C:\\Users\\Owner\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\"
    "NTLogoURL"="http://go.microsoft.com/fwlink/?LinkID=403856&language={language}&scale={scalelevel}&contrast={contrast}"
    Thanks - I get the impression this is a false positive detected by AdwCleaner v 8.0.3
      My Computers

  7.   My Computers

  8. Steve C's Avatar
    Posts : 6,278
    Windows 10 Pro 64 bit
    Thread Starter
       #8

    I have no such extension
      My Computers

  9. Porthos's Avatar
    Posts : 881
    Win 10
       #9

    Steve C said:
    I have no such extension
    Then let it clean it if you have not already done so. If you already did and it keeps coming back then that is different. But as you said it might be a FP. We will have to wait and see.

    Side note, Even though I am a MB user seller and supporter, I have never had a reason to run ADW cleaner on any machine I touch and do not plan to. It has its purpose but I have never felt the need especially since the addition of OEM bloatware detection. I have other means of dealing with that.
      My Computers

  10. Porthos's Avatar
    Posts : 881
    Win 10
       #10

    I have tagged a staff member over on the MB forum to look into the issue. Let's wait till then.
      My Computers


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 17:21.
Find Us




Windows 10 Forums