AdwCleaner keeps picking up 3 swDumon related threats

[Maximo40000]

Dear experts,

I have recently started a topic on the bleeping computers forum to help me get rid of swdumon. AdwCleaner keeps picking up these 3 threats which should have seized to be active. I have been advised to start a new topic here to get rid of them completely.

I have attached my most recent scan.

My bleeping computers topic: https://www.bleepingcomputer.com/forums/t/642034/swdumon-picked-up-by-adwcleaner-keeps-coming-back-afther-system-reboot/

Thank's in advance,

Maximo40000

AdwCleaner[S22]_Maximo.txt

[jboursier]

Hello,

Thanks, I've read your topic. Can you reboot in SafeMode, and retry (a Scan followed by a Clean) from this?

Thanks,

Edited March 21, 2017 by fr33tux

[Maximo40000]

Hi fr33tux,

Thank's for your time. I did a clean in safemode, but the same threats get picked up when I scan after reboot.

Cleaning log attached below.

Kind regards,

Maximo40000

AdwCleaner[C14]_Maximo.txt

Edited March 22, 2017 by Maximo40000

[jboursier]

Hello,

Hm, it's strange.

Can you share me the Malwarebytes 3 logfile: https://www.malwarebytes.com/mwb-download/thankyou/

Thanks,

[Maximo40000]

Here you go. Malwarebytes detected 2 threats and was able to move them to quarantine, but scanning with adwCleaner and Malwarebytes after reboot results in finding the same threats.

MWB-scanlog_Maximo.txt

Edited March 22, 2017 by Maximo40000

[jboursier]

Hello,

Can you regenerate a fresh FRST log?

• Download FRST
• Right-click on the file -> "Execute as Administrator"
• Please also check Shortcut.txt
• Click on the "Scan" button
• The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
• Please host them on Up2Share and share the generated link.

Thanks,

[Maximo40000]

Links below:

FRST.txt: https://up2sha.re/file?f=XDR4uSPMGNBr

Addition.txt: https://up2sha.re/file?f=KajE9lCq7gbn

Shortcut.txt: https://up2sha.re/file?f=OlBe9NRAlYDN

[Maximo40000]

It's been about a week since my last reply, is there anyone still looking into this topic, or has it been forgotten?

[jboursier]

Hello,

Sorry for the delay, AdwCleaner v7 is taking a lot of time currently.

So the only way for you to avoid SWDUMon to reappear is to uninstall AVG Driver Updater from your computer. AVG Driver Updater is a rebranded version of a Slimware product which is known to behave like a PUP and trigger our detections.

Best regards,

Edited April 3, 2017 by fr33tux

[Maximo40000]

Quote

Sorry for the delay, AdwCleaner v7 is taking a lot of time currently.

No worries, I understand. I was just getting a bit worried I was forgotten ^^

I deleted AVG updater and indeed, the threats didn't come back. I've read about these driver updaters behaving like this, but i didn't expect an AVG program to be related to Slimware.

Thanks again,

Maximo40000

[jboursier]

Hello,

Great, thank you for letting me know!