Jump to content

ADW Cleaner ghost entries for registry.


CountMike
 Share

Recommended Posts

# AdwCleaner v6.030 - Logfile created 10/11/2016 at 11:40:20
# Updated on 19/10/2016 by Malwarebytes
# Database : 2016-11-10.1 [Server]
# Operating System : Windows 10 Pro Insider Preview  (X64)
# Username : count_000 - COUNT1
# Running from : D:\DOWNLOADS  Win10\adwcleaner_6.030.exe
# Mode: Clean
# Support : hxxps://www.malwarebytes.com/support

***** [ Registry ] *****

[#] Key deleted on reboot: HKLM\SOFTWARE\Classes\Installer\Features\0A167702A96FE1D4DA3296FCA77354D9
[#] Key deleted on reboot: HKLM\SOFTWARE\Classes\Installer\Products\0A167702A96FE1D4DA3296FCA77354D9
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0A167702A96FE1D4DA3296FCA77354D9
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0A167702A96FE1D4DA3296FCA77354D9
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Installer\Features\0A167702A96FE1D4DA3296FCA77354D9
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Installer\Products\0A167702A96FE1D4DA3296FCA77354D9


***** [ Web browsers ] *****

 

*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

Those 6 entries keep on repeating all the time, says they are cleaned but show up on every check.  I can't find those entries in Registry at all. MBAM and other checks don't produce anything.

Link to post
Share on other sites

Same story different non existing registry entries:

#] Key deleted on reboot: HKLM\SOFTWARE\Classes\Installer\Features\0A7275BB60FCF7A44B07560596868F6F
[#] Key deleted on reboot: HKLM\SOFTWARE\Classes\Installer\Products\0A7275BB60FCF7A44B07560596868F6F
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0A7275BB60FCF7A44B07560596868F6F
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0A7275BB60FCF7A44B07560596868F6F
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Installer\Features\0A7275BB60FCF7A44B07560596868F6F
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Installer\Products\0A7275BB60FCF7A44B07560596868F6F

Link to post
Share on other sites

That's just it, there's no key like that in Registry. Can't find it manually and none of registry editors can find it.

I do the ADW Cleaner scan, it finds it, "Cleans" it, reboot, re-scan and there it is again and still nothing in registry.

So, finding something apparently not existing in registry is my problem (although not a large one). It is also the only program that is flagging those registry entries. 

Link to post
Share on other sites

  • 3 weeks later...
  • 6 months later...
On 12/2/2016 at 9:24 AM, edkiefer said:

this one is coming up for me even though there no key there. I also posted in  the Auslogic FP post.

***** [ Registry ] *****

Key Found:  HKLM\SOFTWARE\Auslogics

I just started using ADWCLEANER 6.047 today.  It found this same registry key on the scan.  I looked in regedit, and the key does not exist.  Where is the ADWCLEANER scan picking this up???

I used to have Auslogics defrag installed, but I uninstalled it last year when MBAM first detected it as a PUP.

Edited by Tinstaafl
Link to post
Share on other sites

1 hour ago, CountMike said:

What about this part  ?

**** [ Registry ] *****

Key Found:  HKLM\SOFTWARE\Auslogics

 

Get rid af any Auslogic stuff !!!!

 

It's a "ghost"!!!  Not there.  I uninstalled all of my Auslogics last year!  No key in the registry if I look manually in regedit.

Link to post
Share on other sites

10 minutes ago, fr33tux said:

Thanks for the link!  I deleted the Auslogics registry entry at HKEY_LOCAL_MACHINE\Software\Wow6432Node and the next scan was clean.

***** [ Registry ] *****

No malicious registry entries found.

As a general practice, I do not run registry cleaners, preferring to do the surgery myself, following an elaborate disk imaging process.

But I do have a lingering question in this particular case.  If I had allowed AdwCleaner to attempt this registry cleanup (I chose not to), would it have followed the Registry Redirect and deleted the entry from Wow6432Node, or would I have still needed to manually delete this entry???

Thanks, again!

Link to post
Share on other sites

2 minutes ago, fr33tux said:

Hello,

@Tinstaafl It should be handled by AdwCleaner, and it usually is so there's ikely an issue.

Not sure there's an issue, because I declined to run the cleaner step.  I stopped after the first detection, and then attempted to correct the registry manually.  Since there was nothing at the logged registry key, it then prompted my post ...

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.