AdwCleaner finds Start Menu shortcut (mistake)

[Wisewiz]

Today 26 Jun 2023, AdwCleaner found a shortcut (just a shortcut) named Start Menu on my PC and told me it was a Preinstalled program called Pokki Start Menu.

Asked for permission to quarantine. That shortcut is a shortcut to "C:\Users\<username>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs" where the contents of the Windows 11 Start Menu reside. The shortcut just opens File Explorer to that Programs folder, so that I can easily add shortcuts to or delete shortcuts from the Start menu. I thought this was just a silly mis-firing of AdwCleaner, so I re-ran it, and it again wanted to quarantine my shortcut that goes nowhere except to my File Explorer.

I checked on the Net and there is, in fact, a very old (2012 appears to be the last update) program named Pokki Start Menu, but my shortcut isn't it.

 

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the AdwCleaner Help forum.
In order to help us assist you to resolve your issue, please post or attach your latest AdwCleaner log files with your post. https://support.malwarebytes.com/hc/en-us/articles/360039021593

Someone will reply shortly, but in the meantime here are a few resources which may help resolve your issue:

• Malwarebytes AdwCleaner guide
• A malicious element isn't being detected? Submit the sample here!
• Need help with another Malwarebytes product or malware removal?
  • Click here for home support
  • Click here for business support
  • Click here for malware removal help

Thanks in advance for your patience.

-The Malwarebytes Forum Team

 

 

 

 

[Porthos]

3 minutes ago, Wisewiz said:

oday 26 Jun 2023, AdwCleaner found a shortcut (just a shortcut) named Start Menu on my PC and told me it was a Preinstalled program called Pokki Start Menu.

Please do the following so that we may take a closer look at your system for any possible infections.

• WARNING: Do Not click the Repair System under Advanced unless requested by a Malwarebytes support agent or authorized helper

NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

• Download the Malwarebytes Support Tool
• In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
• In the User Account Control pop-up window, click Yes to continue the installation
• Run the MBST Support Tool
• In the left navigation pane of the Malwarebytes Support Tool, click Advanced
• In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
• A zip file named mbst-grab-results.zip will be saved to the Public desktop, please upload that file on your next reply
  
   

Thank you

[Wisewiz]

Hi, Porthos, Fancy meeting you here, instead of on Elevenforum!

I have an unorthodox installation of AdwCleaner, so I hope the Tool found the logs you need. They aren't ever on my C:\ drive. I run the AdwCleaner file from a shortcut I worked out for myself and posted a long time ago here. There was a page on the AdwCleaner site that helped with some clues. I just don't allow anything to mess with my C:\ drives unless it can't be helped. I can zip and upload just my real logs if you would prefer that.

My shortcut: "D:\Malware Tools\AdwCleaner\adwcleaner.exe" /path  "D:\Malware Tools\AdwCleaner"

Nothing about the location of the AdwC files or the logs would affect the accuracy of the program, of course.

mbst-grab-results.zip

[Wisewiz]

I think this was my first experience with the MWBST. Using it raisd a question in my mind, though: What did running that .exe add to my files and my registry?

I noted that the Tool was not listed in Installed Apps, but I thought last night that it had added some files to my ProgramData\Malwarebytes folder. I haven't finished a search for anything else.

My questions for you Trusted Advisors are, Can I uninstall everything that the Tool installed? If so, what is the best way to accomplish that?

[Porthos]

Just now, Wisewiz said:

What did running that .exe add to my files and my registry?

The only thing added was FRST to your downloads folder.

1 minute ago, Wisewiz said:

Can I uninstall everything that the Tool installed? If so, what is the best way to accomplish that?

Hold off until a staff member looks into the issue. Might need it again.

[Wisewiz]

Thanks, Porthos. There's a message from me in your inbox on W11F.

If a staff member needs my logs again, he'll have to take a zipped file of the currently existing logs in my AdwCleaner\Logs folder. I don't mind, however, running AdwCleaner again, to produce a fresh log. If AdwCleaner repeats the mistake, I will simply unquarantine my shortcut.

[Porthos]

13 minutes ago, Wisewiz said:

There's a message from me in your inbox on W11F.

I spend limited time there for the most part. I saw the message a bit ago. This is my home.

[Wisewiz]

Understood. A fine home it is, too. 

Where do I find out how to change the generic avatar to mine? Is this a "minimum ten posts" (or sthg like that) arrangement? 

[Porthos]

4 minutes ago, Wisewiz said:

Is this a "minimum ten posts" (or sthg like that) arrangement? 

Yes, but the min is not publicly disclosed.

[Wisewiz]

Any idea what is happening with my report about AdwCleaner finding a simple shortcut (named Start Menu, granted) and quarantining it?

[Wisewiz]

@PorthosThanks for your reply on another forum. I'm still a little surprised that it took twelve days from the release of the current update to my receiving it. That's a long time in the antimalware world. 4.5.33.272 1.0.2069 was received by people I know on the 13th of this month, and I just got it today. Slooow rollout, that.