mistermarmot

Yep, never claimed it was infected. Just curious about the kind of code in the product that set's off false positives. Thanks for the advise, Mr Lewis.

I suspect there will be a next time as this is the second time I've cleaned Rocket Tabs off her machine. The other two were new. It's a matter of habit that to send a file to VirusTotal and I sent "Security Check" and it came back with 6 infections of 54 scanners. All false positives from the type of software it is or does it contain some virus definitions? https://www.virustotal.com/en/file/810f4b9d4f77b3100e4256059ae8f4c3fd0637bb0129a37b60d758ff77858a0f/analysis/1411030042/ Here is the AdwCleaner log after Revo removed most of it as they had no uninstallers at all. Web Protect actually installs its own proxy .dll and sets the OS to proxy there. Having their servers sniff over her packets seems so dangerous and worse than just a PUP classification for this program. # AdwCleaner v3.310 - Report created 17/09/2014 at 19:29:40# Updated 12/09/2014 by Xplode# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)# Username : Julie - JULIE-PC# Running from : C:\Users\Julie\Downloads\adwcleaner_3.310.exe# Option : Scan ***** [ Services ] ***** Service Found : ProtectMonitor ***** [ Files / Folders ] ***** File Found : C:\monitorsvc.exeFile Found : C:\Users\Julie\AppData\Roaming\Mozilla\Firefox\Profiles\zlsxabtv.default\user.jsFolder Found : C:\Program Files (x86)\RocketTabFolder Found : C:\Program Files (x86)\SearchProtectFolder Found : C:\Program Files (x86)\Web ProtectFolder Found : C:\Users\Julie\AppData\Local\RocketTab ***** [ Scheduled Tasks ] ***** Task Found : RocketTab Update TaskTask Found : RocketTab ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Data Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dllData Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dllKey Found : HKCU\Software\RocketTabInstalledKey Found : [x64] HKCU\Software\RocketTabInstalled ***** [ Browsers ] ***** -\\ Internet Explorer v11.0.9600.17280 -\\ Mozilla Firefox v32.0.1 (x86 en-US) [ File : C:\Users\Julie\AppData\Roaming\Mozilla\Firefox\Profiles\zlsxabtv.default\prefs.js ] ************************* AdwCleaner[R0].txt - [1503 octets] - [17/09/2014 19:29:40] ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1563 octets] ##########

My client swears she installed nothing since I was there last and yet she had the Web Protect (monitorsvc.exe), SearchProtect and Rocket Tabs infections. I used Revo Uninstaller and of course they had no uninstaller programs so it had to do the work and then more work was needed to restore the machine. One of the these installed it's own proxy and set the machine to use their server. That's pretty nasty concept to have all her personal info sniffed upon by their servers. Anyway, she plays Second Life Firestorm and so I wonder if there is any way to get the infections through playing that game? I have no experience with it. She had Avast! installed but it caught nothing of these adware/malware programs. Their decision to uncheck PUP by default (and the detection rates an other reasons) had me leave them some years ago. She's a loyalist but after this new install, forgot to check PUP detection.

Computer usage is changing. People are now using several operating systems on their machines and may own several devices. Many people have Linux installed and run a virtual machine of XP or newer OS to run their windows apps. They may keep an XP VM around to run older apps that are having trouble with Win 8. Installing an application several times, once for every OS VM is time consuming and troublesome and violates EULA's. It's easier to install the app once onto an external drive in a portable form with all it's configuration files in the local directory and then it is available to any OS VM that is started on the computer. People upgrade their computers every couple years and now days they may have installed over 100 applications that need to be migrated to the new machine. Personally, I have owned nearly 30 machines in the last 20 years and have installed my applications hundreds, maybe thousands of times. I'M DONE!!!! From now on I install a portable copy on the Passport external and let the application upgrade itself when it runs. If I change my OS (which I have done 3 times in the last month) or buy a new computer I will NOT reinstall my 100+ apps ever again. No more... Done wasting my precious time reinstalling apps every year which can take an entire week of nights getting the apps to where they were before I bought the new machine. Lastly, you have a competitor that provides an anti-malware product that is beating Malwarebytes on detection rates regularly over the last 9 months and THEY provide a portable version. I've been relying on their product the last 6 months and Malwarebytes has been sitting unused. If you all wish to continue fighting the trend and not provide a portable product that is your choice and it's a poor business choice....