Adwcleaner claims GoogleUpdate.exe reg key is malware

[gorbulan]

Greetings,

 

Not sure if this is the right forum for something that only involves AdwCleaner. Should I try BleepingComputer instead? Anyway here goes...

 

I ran Adwcleaner on two different computers. Both came up with the same results in the following log:

# AdwCleaner v4.001 - Report created 29/10/2014 at 11:06:33# Updated 20/10/2014 by Xplode# Database : 2014-10-26.6# Operating System : Windows 7 Professional Service Pack 1 (64 bits)# Username : lausd_administrator - LIBGIGABYTEPC# Running from : J:\Software\Windows\Antivirus\AdwCleaner.exe# Option : Scan***** [ Services ] ********** [ Files / Folders ] ********** [ Scheduled Tasks ] ********** [ Shortcuts ] ********** [ Registry ] *****Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe***** [ Browsers ] *****-\\ Internet Explorer v0.0.0.0-\\ Mozilla Firefox v32.0.1 (x86 en-US)-\\ Google Chrome v38.0.2125.111*************************AdwCleaner[R0].txt - [772 octets] - [29/10/2014 11:06:33]########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [831 octets] ##########

It seems to have deleted GoogleUpdate or something hiding as GoogleUpdate. I guess it was legit as GoogleUpdate no longer appears in the startup tab of msconfig.exe.

 

Is this a false positive or something I should actually worry about?

 

Attached are the Farbar logs.

FRST.txt

Addition.txt

[gorbulan]

I think Adwcleaner has a false positive. Mbam and Bitdefender did not find any malware when I scanned with them. Also, if you remove the googleupdate.exe, and reinstall Chrome, Googleupdate.exe reappears.

 

I have made a thread on Bleepingcomputer since it seems to be an adwcleaner issue. If you all agree, then please close this thread.

[AdvancedSetup]

We're sorry. It looks like your topic was somehow overlooked. Due to the length of time we'll go ahead and close this topic now but if you still actually need help please send a private message to one of the Moderators and we'll assist you.

Thank you and sorry we missed your topic.