 Goodbye CCleaner
@cox.net | CCleaner now installs with adware? D/Led the new version 2.02.257 - and when i ran my av overnight I found that Adware.SystemProcess was also now installed. AV removed it, but I was wondering if anyone else saw this too? The new CC version was all I d/led yesterday.
Thankss | |
|
  Cudni La Merma - Vigilado Premium,MVM join:2003-12-20 Someshire | Re: CCleaner now installs with adware? i just updated my version and nothing untoward found what is the location of the suspected adware process and what AV reported it?
Cudni | |
|
  Doctor Olds I Need A Remedy For What's Ailing Me. Premium,VIP join:2001-04-19 1970 442 W30 clubs:
1 edit | An infector that was first found in 2005? Not likely that it came with CC. Your system let this BHO get installed from elsewhere.
»www.rickmaybury.com/fffpages/fff···v05.html quote: 26-27/11/05 MALWARE INFESTATION WON''T GO AWAY Hi Rick, I use Ad-Aware SE Personnel and Firefox. However, I keep getting a malware called "Adware.SystemProcess". Do you know where it originates and whether it is a cause for concern? Nigel Deller A. No problem, Adware SystemProcess is a persistent piece of malware that hides inside the Registry and latches on to Internet Explorer (yet another good reason to switch to Firefox), it then makes use of your internet connection and fiddles with your Firewall settings to allow it to connect with an outside company (usually ValueClick or one of its affiliates) to display ads in pop-up windows. AdAware should have removed it, however, the specific malware definition was included in update SE1R72, released on the 26th of October, so I suggest you download the latest updates and run it again. Otherwise there are manual removal procedures, (which involve editing the Registry) on the Symantec web site.
-- Whats the point of owning a supercar if you cant scare yourself stupid from time to time? | |
|
 |
 |   sashwa Pixie Cat Crunchin' n Foldin' Premium,Mod join:2001-01-29 Alcatraz clubs:  | Re: CCleaner now installs with adware? I'm using NAV 2006 and have CC 2.02.257. I ran a AV scan yesterday and I just noticed that it tagged the same thing - Adware.SystemProcess | |
|
 |  |   Doctor Olds I Need A Remedy For What's Ailing Me. Premium,VIP join:2001-04-19 1970 442 W30 clubs:
| Re: CCleaner now installs with adware? »www.symantec.com/security_respon···&tabid=2 quote: Updated: February 13, 2007 11:46:22 AM Type: Adware Version: 1.0.0.1 Risk Impact: High File Names: ccapp.exe,navshext.dll Systems Affected: Windows 2000, Windows 98, Windows CE, Windows Me, Windows NT, Windows Server 2003, Windows XP
When Adware.SystemProcess is executed, it performs the following actions:
1. Creates the following files:
* %System%\ccapp.exe * %System%\navshext.dll * %System%\p.dat * %System%\system.dat
Note: %System% is a variable that refers to the System folder. By default this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
2. Downloads the following file:
%System%\ustart.exe (This is detected as Adware.WintaskAd.)
3. Creates the following registry subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion \Uninstall\Startup HKEY_LOCAL_MACHINE\SOFTWARE\System Process HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID \{C2EEB4FA-B6D6-41b9-9CFA-ABA87F862BCB} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion \Explorer\Browser Helper Objects \{C2EEB4FA-B6D6-41b9-9CFA-ABA87F862BCB} HKEY_USERS\S-1-5-21-448539723-413027322-839522115-1003 \Software\Microsoft\Windows\CurrentVersion\Internet Settings \P3P\History\anrdoezrs.net HKEY_USERS\S-1-5-21-448539723-413027322-839522115-1003 \Software\Microsoft\Windows\CurrentVersion\Internet Settings \P3P\History\bfast.com HKEY_USERS\S-1-5-21-448539723-413027322-839522115-1003 \Software\Microsoft\Windows\CurrentVersion\Internet Settings \P3P\History\cc-dt.com HKEY_USERS\S-1-5-21-448539723-413027322-839522115-1003 \Software\Microsoft\Windows\CurrentVersion\Internet Settings \P3P\History\commission-junction.com HKEY_USERS\S-1-5-21-448539723-413027322-839522115-1003 \Software\Microsoft\Windows\CurrentVersion\Internet Settings \P3P\History\dpbolvw.net HKEY_USERS\S-1-5-21-448539723-413027322-839522115-1003 \Software\Microsoft\Windows\CurrentVersion\Internet Settings \P3P\History\fastclick.com HKEY_USERS\S-1-5-21-448539723-413027322-839522115-1003 \Software\Microsoft\Windows\CurrentVersion\Internet Settings \P3P\History\fastclick.net HKEY_USERS\S-1-5-21-448539723-413027322-839522115-1003 \Software\Microsoft\Windows\CurrentVersion\Internet Settings \P3P\History\jdoqocy.com HKEY_USERS\S-1-5-21-448539723-413027322-839522115-1003 \Software\Microsoft\Windows\CurrentVersion\Internet Settings \P3P\History\kqzyfj.com HKEY_USERS\S-1-5-21-448539723-413027322-839522115-1003 \Software\Microsoft\Windows\CurrentVersion\Internet Settings \P3P\History\linksynergy.com HKEY_USERS\S-1-5-21-448539723-413027322-839522115-1003 \Software\Microsoft\Windows\CurrentVersion\Internet Settings \P3P\History\qksrv.net HKEY_USERS\S-1-5-21-448539723-413027322-839522115-1003 \Software\Microsoft\Windows\CurrentVersion\Internet Settings \P3P\History\tkqlhce.com
4. Adds the value:
"*.system-processes.com" = ""
to the registry subkey:
HKEY_USERS\S-1-5-21-448539723-413027322-839522115-1003\Software \Microsoft\Internet Explorer\New Windows\Allow
5. Adds the value:
"%Windir%\system32\ccapp.exe" = "%Windir%\system32\ccapp.exe:*:Enabled:System Process"
to the registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services \SharedAccess\Parameters\FirewallPolicy\StandardProfile \AuthorizedApplications\List
6. Adds the value:
"System Process Uninstall" = "%Windir%\system32\ccapp.exe UAF"
to the registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
-- Whats the point of owning a supercar if you cant scare yourself stupid from time to time? | |
|
 |
 |   MagMan Life is simpler when you tell the truth. Premium join:2003-10-01 Westlake, OH | Re: CCleaner now installs with adware? Thanks Amy. 
Was trying to find some info on this,but did not come up with much. | |
|
 |  |   amysheehan Premium,VIP,MVM join:1999-12-21 Huntington Beach, CA
·RoadRunner Cable
| Re: CCleaner now installs with adware?What would really help is for everyone to post the name of the file that was flagged during the scan - go to the Log Viewer / Security Risks for the source and name of the file found.
Thanks !!!
-amy-
 -- DSLR Phishtracker | |
|
 |  |  |   MagMan Life is simpler when you tell the truth. Premium join:2003-10-01 Westlake, OH
·AT&T Midwest
·AT&T Midwest
| Re: CCleaner now installs with adware? said by amysheehan :What would really help is for everyone to post the name of the file that was flagged during the scan - go to the Log Viewer / Security Risks for the source and name of the file found. Thanks !!! -amy- This is what I have amy it is not showing a source. -- "The truth is incontrovertible, malice may attack it, ignorance may deride it, but in the end; there it is." | |
|
 |  |  |  |   amysheehan Premium,VIP,MVM join:1999-12-21 Huntington Beach, CA
·RoadRunner Cable
| Re: CCleaner now installs with adware? Detailed Risk Properties Info |
said by MagMan :said by amysheehan :What would really help is for everyone to post the name of the file that was flagged during the scan - go to the Log Viewer / Security Risks for the source and name of the file found. Thanks !!! -amy- This is what I have amy it is not showing a source. I found more details for a 'tracking cookie' that was found this AM that had no details by going to Quick Tasks / View History / Security History / Advanced Details / Risk Properties / Details.
See screenshot for more info - have a look there if you can. [2007 and 2008 versions]
-amy- -- DSLR Phishtracker | |
|
 |  |  |  |  |   MagMan Life is simpler when you tell the truth. Premium join:2003-10-01 Westlake, OH
·AT&T Midwest
·AT&T Midwest
| Re: CCleaner now installs with adware? said by amysheehan :said by MagMan :said by amysheehan :What would really help is for everyone to post the name of the file that was flagged during the scan - go to the Log Viewer / Security Risks for the source and name of the file found. Thanks !!! -amy- This is what I have amy it is not showing a source. I found more details for a 'tracking cookie' that was found this AM that had no details by going to Quick Tasks / View History / Security History / Advanced Details / Risk Properties / Details. See screenshot for more info - have a look there if you can. [2007 and 2008 versions] -amy- This is what mine shows. -- "The truth is incontrovertible, malice may attack it, ignorance may deride it, but in the end; there it is." | |
|
 |  |  |  |
 |  |  |  |   amysheehan Premium,VIP,MVM join:1999-12-21 Huntington Beach, CA
·RoadRunner Cable
| Re: CCleaner now installs with adware? said by sashwa :Amy, I'm not showing anything in my Log Viewer / Security Risks for yesterday's date. FWIW, I submitted the file to Symantec for review. NAV said it was found in 25 registry entries. Also NAV never made a peep when I downloaded and installed the new version of CCleaner which was when it first come out. It squawked during my weekly full scan. [att=1][att=2] Thanks for the screenshot and for submitting your item to them. Looks like it may just be registry entries that were found. I'm sure that info will be helpful to Symantec.
-amy-
 -- DSLR Phishtracker | |
|
 |  |  |  |  |   MagMan Life is simpler when you tell the truth. Premium join:2003-10-01 Westlake, OH 1 edit | Re: CCleaner now installs with adware? Thanks for your imput.  | |
|
 |  |  |  |  |  |   Doctor Olds I Need A Remedy For What's Ailing Me. Premium,VIP join:2001-04-19 1970 442 W30 clubs: | Re: CCleaner now installs with adware? Your screen shot shows 71 Registry Entries and 2 Files.
What were the 2 Files? | |
|
 |  |  |  |  |  |  |   MagMan Life is simpler when you tell the truth. Premium join:2003-10-01 Westlake, OH
·AT&T Midwest
·AT&T Midwest
| Re: CCleaner now installs with adware? said by Doctor Olds :Your screen shot shows 71 Registry Entries and 2 Files. What were the 2 Files? This. -- "The truth is incontrovertible, malice may attack it, ignorance may deride it, but in the end; there it is." | |
|
 |  |  |  |  |  |  |  |  |
 |  |  |  |  |  |  |  |  |   MagMan Life is simpler when you tell the truth. Premium join:2003-10-01 Westlake, OH
·AT&T Midwest
·AT&T Midwest
| Re: CCleaner now installs with adware? said by amysheehan :said by MagMan :said by Doctor Olds :Your screen shot shows 71 Registry Entries and 2 Files. What were the 2 Files? This. P.DAT is one of the files referenced in the Symantec write up - » www.symantec.com/security_respon···&tabid=2-amy- So your point being is what according to what NIS is saying it is toast.Which as far as I am concerned never existed in the first place. 
My machine was not infected with this to me this is an FP. -- "The truth is incontrovertible, malice may attack it, ignorance may deride it, but in the end; there it is." | |
|
 |  |  |  |  |  |  |  |  |   amysheehan Premium,VIP,MVM join:1999-12-21 Huntington Beach, CA
·RoadRunner Cable
| Re: CCleaner now installs with adware? said by MagMan :So your point being is what according to what NIS is saying it is toast.Which as far as I am concerned never existed in the first place.  My machine was not infected with this to me this is an FP. To clarify - I think that the app was flagged because for whatever reason there were registry entries and / or files that matched this definition. I would think it's a FP, but I am NOT the expert.
-amy-
 -- DSLR Phishtracker | |
|
 |  |  |  |  |  |  |  |  |  |
 |  |  |  |  |  |  |  |  |  |
 |  |  |  |  |  |  |  |  |   MagMan Life is simpler when you tell the truth. Premium join:2003-10-01 Westlake, OH | Re: CCleaner now installs with adware? So are we coming to a conclusion here of CCleaner being the culprit.  | |
|
 |  |  |  |  |  |  |  |  |  PrntRhd
join:2004-11-03 Fairfield, CA
·Comcast
·Comcast Formerly ..
1 edit | Re: CCleaner now installs with adware? said by MagMan :So are we coming to a conclusion here of CCleaner being the culprit. Yeah, it was not CCleaner, it is NIS FP.
Also notice it was a anonymous poster who started the thread. | |
|
 |  |  |  |  |  |  |  |  |   sashwa Pixie Cat Crunchin' n Foldin' Premium,Mod join:2001-01-29 Alcatraz clubs:  | Re: CCleaner now installs with adware? PrntRhd, it's not just NIS as I only use NAV. | |
|
 |  |  |  |  |  |  |  |  |  |
 |  |  |  |  |  |  |  |  |   MagMan Life is simpler when you tell the truth. Premium join:2003-10-01 Westlake, OH
·AT&T Midwest
·AT&T Midwest
| said by PrntRhd :said by MagMan :So are we coming to a conclusion here of CCleaner being the culprit. Yeah, it was not CCleaner, it is NIS FP. Also notice it was a anonymous poster who started the thread. Ya your right I forgot about that,and that poster has not posted any other information about his situation in this thread. -- "The truth is incontrovertible, malice may attack it, ignorance may deride it, but in the end; there it is." | |
|
 |  |  |  |  |  |  |  |  |  |
 |  |  |  |  |  |  |  |  |   MagMan Life is simpler when you tell the truth. Premium join:2003-10-01 Westlake, OH
·AT&T Midwest
·AT&T Midwest
| Re: CCleaner now installs with adware? said by sashwa :But regardless of the OP being anon, there are those of us using NAV and/or NIS that are seeing this. It could be from the CC upgrade or it could just be a conscience it happened around the same time and has nothing to do with the upgrade. Well whatever is going on we need some answers to it either way. -- "The truth is incontrovertible, malice may attack it, ignorance may deride it, but in the end; there it is." | |
|
 |  |  |  |  |  |  |  |  |  |
 |  |  |  |  |  |  |  |  |   amysheehan Premium,VIP,MVM join:1999-12-21 Huntington Beach, CA
·RoadRunner Cable
1 edit | Re: CCleaner now installs with adware? said by sashwa :Amy, I wonder if it could have something to do with the virus update yesterday rather than from the CC upgrade? My upgrade was done around 11/5/07 and no peep from NAV until I did my weekly full scan. I scanned thru all the detections added and modified by Symantec for November and didn't find any changes or additions to Adware.SystemProcess »www.symantec.com/avcenter/whats_···-11.html
But I may have missed it  -- DSLR Phishtracker | |
|
 |  |  |  |  |  |  |  |  |  |
 |  |  |  |  |  |  |  |  |   sashwa Pixie Cat Crunchin' n Foldin' Premium,Mod join:2001-01-29 Alcatraz clubs:  | Re: CCleaner now installs with adware? I'm not using SpywareBlaster but I do use Spybot and Ad-Aware 2007. | |
|
 |  |  |  |  |  |  |  |  |  |
 |  |  |   aeloel
@1starnet.com
| There is no source file. My NAV CE logs don't have good detail, except to say the infection was succesfully quarantined, but in looking at the event logs on the PC, I found the following symantec application message.
Event Type: Information Event Source: Symantec AntiVirus Event Category: None Event ID: 3 Date: 11/12/2007 Time: 2:02:06 AM User: N/A Computer: 01WS010704 Description:
Risk: in File: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History\linksynergy.com by: Scheduled scan. Action: Quarantine succeeded. Action Description: The file was quarantined successfully.
In reviewing the documentation on this Adware.systemprocess infection. It seems weird that this was the only element present in any of the affected machines.
FYI: we only use NAV CE now, but used to also have SpyBot S&D on some of them too. | |
|
 |  |  |  |  |
 |  |  |  |  |   blue
@telus.net
| Re: Something to do - re: possible SpyBot old entries Hello, Thanks Amy for posting this info. I too had this infection over the weekend. Do you know which program cause this??? I had a look under the regedit and there are lots under the zonemap\domains but I am still using Spy bot S&D. Please advise on what to do next. My pc is running good, but I am having lots of cookies every day, and not even using the internet.If I delete the files in the regedit under zonemap\domains will that remove the Spy bot S&D program? Please post the quick fix. Thanks | |
|
 |  |  |  |  |  |   amysheehan Premium,VIP,MVM join:1999-12-21 Huntington Beach, CA
·RoadRunner Cable
| Re: Something to do - re: possible SpyBot old entries said by blue :
Hello, Thanks Amy for posting this info. I too had this infection over the weekend. Do you know which program cause this??? I had a look under the regedit and there are lots under the zonemap\domains but I am still using Spy bot S&D. Please advise on what to do next. My pc is running good, but I am having lots of cookies every day, and not even using the internet.If I delete the files in the regedit under zonemap\domains will that remove the Spy bot S&D program? Please post the quick fix. Thanks On the machine that has SpyBOT installed you can remove the SBot entries made by removing the immunization. After you close SBot check the registry for any entries that are still present for each user account in the registry at the locations I noted before. Manually delete any entries you did not make yourself and close the registry. Immunization will work best if zonemap\domains no longer lists any SUBKEYS. Do NOT delete the zonemap\domains key just any SUBKEYS. Now you should be ready for a clean re-immunization with SpyBot. If you note any strange reg entries please post back with the info.
-amy-
 -- DSLR Phishtracker | |
|
 |  |  |  |  |  |  |   w8sdz
join:2001-05-21 Port Orange, FL
3 edits | Re: Something to do - re: possible SpyBot old entriesThis inf file will clean the Domains keys:
; DelDomains.inf ; Created by: Mike Burgess Microsoft MVP ; »mvps.org/winhelp2002/
(edited to remove code because next posting by Amy Sheehan has an improved version) -- 73 de w8sdz - sip:271752@fwd.pulver.com | |
|
 |  |  |  |  |  |  |  |   amysheehan Premium,VIP,MVM join:1999-12-21 Huntington Beach, CA
·RoadRunner Cable
1 edit | Deldomains and how to reset restricted zones - MORE Thank you for posting the deldomains info.
I was going to post the link and info once I got home to the computer to retrieve it all.
Again, thank you !!!
Some additional info: How to download and more about deldomains and etc:
»mvps.org/winhelp2002/ [split] DelDomains.inf [remove split from URL to access] For instructions on how to use Deldomains go to: »mvps.org/winhelp2002/restricted.htm and scroll down to the section titled ''To remove all the sites listed in the Restricted Zone'' NOTE: Also new to IE7 the "Reset Internet Explorer settings" will remove all sites in the Trusted and Restricted Zones. Go to internet options/advanced and the reset button is at the bottom of the window.
-amy-

-- DSLR Phishtracker | |
|
  dadkins Can you do Blu? Premium,MVM join:2003-09-26 Hercules, CA
·Comcast
| Newest(shocker?) CrapCleaner here, went through the manual removal steps at the Symantec site - nada.
avast never made a peep when I installed CCleaner - ever. Just finished a system scan with avast - nada.
Me thinks, like Doctor Olds, it came from somewhere else. If, in fact, you did get this old critter, you should be more concerned on how or why it got past your current AV. -- Think outside the Fox... Opera | |
|
 |  |
  hayc59 VoodooChild Premium join:2001-02-26 David R.I.P. | Ran NOD32/SUPERAntispyware/KAV found no such beast here!! | |
|
 |   dadkins Can you do Blu? Premium,MVM join:2003-09-26 Hercules, CA
·Comcast
| Re: CCleaner now installs with adware? said by hayc59 :Ran NOD32/SUPERAntispyware/KAV found no such beast here!! You can add a2 to that list as well... -- Think outside the Fox... Opera | |
|
 |  |   hayc59 VoodooChild Premium join:2001-02-26 David R.I.P.
| Re: CCleaner now installs with adware? said by dadkins :said by hayc59 :Ran NOD32/SUPERAntispyware/KAV found no such beast here!! You can add a2 to that list as well... Yes indeed, just got done running that  | |
|
 |
 |   sashwa Pixie Cat Crunchin' n Foldin' Premium,Mod join:2001-01-29 Alcatraz clubs:  1 edit | Re: CCleaner now installs with adware? I use the standard but opted out of the toolbar and the other stuff they offered but can't remember. | |
|
 |
 PrntRhd
join:2004-11-03 Fairfield, CA | Sorry guys, Norton or NIS, all the same to me. I also use SB and it is not tripping Avast or any online scans either. | |
|
 |
  La Luna Surviving Ashraful Premium join:2001-07-12 Warwick, NY clubs: | I'm still using v2.01.507, so I can't check for this issue, but has anyone contacted the CCleaner developers themselves to ask about this? | |
|
 |   hayc59 VoodooChild Premium join:2001-02-26 David R.I.P.
| Re: CCleaner now installs with adware? said by La Luna :I'm still using v2.01.507, so I can't check for this issue, but has anyone contacted the CCleaner developers themselves to ask about this? pmed the author as soon as I saw this thread will see if he/she[Mr.G.] shows | |
|
  Ryan Premium join:2001-03-03 Attleboro, MA | Nod32 everything clean here. Either a false positive by symantec or picked up a unrelated infection. | |
|
 |
  yuutomo The Wonder Kitter Premium join:2001-08-27 Missoula, MT | can you poet the link of where you downloaded it from, need to see what server or service is hosting it. | |
|
 |
  Olav the Viking
@cableone.net
| I have had Norton remove this 3 times in the past 2 days, but in order to verify that it was a false positive, I went to IE Tools, Privacy, Sites and entered the following 3 sites as "blocked" (cookie blocking):
bfast.com fastclick.com fastclick.net
(they had been previously removed by Norton the day before)
Sure enough, Norton found these and removed them. Hey, Norton, these sites were here for a reason - to BLOCK these site's cookies. It seems that their removal tool is not checking the registry key for the value that indicates that these sites are blocked (5) rather than allowed (1).
The day before, Norton removed these 2 entries from my hosts file:
ads.mcafee.com go2.microsoft.com
Again, those entries were put there for a reason, but Norton thought that I didn't really want them there. I'm not sure if go2.microsoft.com is malicious, it was part of a host file list that I entered into my hosts file a few years ago - I have not had anything that I ever needed blocked by it to my knowledge. The ads.mcafee.com entry was there for obvious reasons.
Me thinks that the people at Symantec need to fix their removal tool. . . | |
|
  batterup I Can Not Tell A Lie. Premium join:2003-02-06 Netcong, NJ clubs:
·Verizon Online DSL
| said by Goodbye CCleaner :
D/Led the new version 2.02.257 - and when i ran my av overnight I found that Adware.SystemProcess was also now installed. AV removed it, but I was wondering if anyone else saw this too? The new CC version was all I d/led yesterday.
Thankss Sweet, times are hard and the hustle has just begun. | |
|
 |
 |   Doctor Olds I Need A Remedy For What's Ailing Me. Premium,VIP join:2001-04-19 1970 442 W30 clubs: | Re: CCleaner now installs with adware? If the file is "zero bytes in length" then it is empty of good or bad content. | |
|
 |  |  |
  Bubba17 Less is More Premium join:2006-09-21
| Updated CC here to 2.02.527 on 11/06 ..
Not a peep from KIS7 v125 (as mirrored from VirusTotal). Nothing from SAS Pro. Nothing from WinPatrol Plus (always resident, patrolling registry).
Can not find any of the listed files/reg changes on my system that would indicate the adware's presence.
Still -- 71 registry changes and two files?? .. that's some dandy FP. -- HN7000s | Horizons 1 (127W) | Gateway: 1110Mhz | Dish: .98m 2 Watt | Pro+
"Fast is fine, but accuracy is everything" --Wyatt Earp | |
|
 okjoe
join:2003-05-20 | Auto scan after 11/10 NIS update. "84 Registry Entrys, 2 Files Affected" Risk Name: Adware.SystemProcess. Status "Removed"
CCleaner 1.40 | |
|
 |  |
 |  |  okjoe
join:2003-05-20
| Re: CCleaner now installs with adware? said by Doctor Olds :said by okjoe :Auto scan after 11/10 NIS update. "84 Registry Entrys, 2 Files Affected" Risk Name: Adware.SystemProcess. Status "Removed" CCleaner 1.40 What were the names of the two files in your system? C:\WINDOWS\system32\p.dat C:\Documents and Settings\xxxx\Local Settings\Temp\ibho.log | |
|
 |
|
 |