Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Stubborn Registry Key


  • Please log in to reply
6 replies to this topic

#1 JoLynch

JoLynch

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:40 PM

Posted 07 June 2016 - 01:38 AM

Hello there,

 

Hopefully I've posted this on the right forum. AdwCleaner has been repeatedly "detecting" and deleting the same registry key after every scan/clean/reboot (attempted this five times now):

 

# AdwCleaner v5.119 - Logfile created 06/06/2016 at 23:18:01
# Updated 30/05/2016 by Xplode
# Database : 2016-06-06.1 [Server]
# Operating system : Windows 10 Home  (X64)
# Username : Jo - JO
# Running from : C:\UsersJo\Desktop\AdwCleaner.exe
# Option : Scan
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLL ] *****


***** [ WMI ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

Key Found : HKLM\SOFTWARE\Classes\CLSID\{0002DF01-0000-0000-C000-000000000046}

***** [ Web browsers ] *****

 

 

I've additionally ran Malwarebytes, Panda Antivirus Pro, ESET Online Scanner, Emsisoft Emergency Kit, and Junkware Removal Tool, all of which came up with 0 threats. No funky computer behavior has come up, either.

 

Is this repeating key something I should worry about? Or write off as a false positive?

 

Thank you,

-J.

 



BC AdBot (Login to Remove)

 


#2 TwinHeadedEagle

TwinHeadedEagle

  • Security Colleague
  • 352 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:08:40 PM

Posted 07 June 2016 - 03:20 AM

Hi,

 

Can you upload all AdwareCleaner reports from C:\AdwCleaner folder?



#3 JoLynch

JoLynch
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:40 PM

Posted 07 June 2016 - 04:01 AM

Hello there,

 

Well, Toolslib just updated the software not too long ago - it appears to be a false positive. (I believe another user had the exact same issue, mentioned here. There was also a number of complaints on the Toolslib forums.) The scan is now coming up with 0 threats. Thank you for responding, though!



#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,612 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:40 PM

Posted 07 June 2016 - 06:11 AM

In the future, you can report issues like this here...AdwCleaner False Positive Reporting Topic
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 satchfan

satchfan

  • Malware Response Team
  • 2,796 posts
  • ONLINE
  •  
  • Gender:Female
  • Location:Devon, UK
  • Local time:08:40 PM

Posted 07 June 2016 - 08:34 AM

That key will reappear as it is a legitimate subkey used by Internet Explorer.

 

You can read more about it in the "More Information" section here.


My help is always free of charge. If you are happy with the help provided, if you wish you can make a donation to buy me a beer.


#6 JoLynch

JoLynch
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:40 PM

Posted 07 June 2016 - 02:49 PM

Ah, good to know. Thank you both for responding!



#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,612 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:40 PM

Posted 07 June 2016 - 03:58 PM

You're welcome on behalf of the Bleeping Computer community.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users