Adlice forum

Software feedback => RogueKiller => Topic started by: ItsMeAgain on July 05, 2018, 10:52:35 PM

Title: question on ADS found with roguekiller
Post by: ItsMeAgain on July 05, 2018, 10:52:35 PM

I have a client pc that was acting strangely- very slow.  Roguekiller found 4 ADS and claimed to have removed but a subsequent scan immediately finds 2 of 4 still there and all 4 there after a reboot.  I admit to not having a great deal of knowledge concerning ads but realize they are data 'forked" into other files that are likely legit.  I'm hoping for some guidance to know what is in the ADS' that RK is detecting.  Here's a screen shot.  I can supply the actual files if that will help
Thanks

Title: Re: question on ADS found with roguekiller
Post by: Curson on July 05, 2018, 11:37:39 PM

Hi ItsMeAgain,

Welcome to Adlice.com Forum.
These are likely legit. Could you please attach RogueKiller JSON report with your next reply ?

Regards.

Title: Re: question on ADS found with roguekiller
Post by: ItsMeAgain on July 07, 2018, 05:32:31 AM

as requested

Title: Re: question on ADS found with roguekiller
Post by: Curson on July 08, 2018, 03:37:24 PM

Hi ItsMeAgain,

Thanks for your feedback.
It seems that this ADS are created in certain case, when Windows 10 is upgraded. We will fix this as soon as possible. For the time being, you can safely ignore such detections.

Regards.

Title: Re: question on ADS found with roguekiller
Post by: ItsMeAgain on July 09, 2018, 04:33:28 PM

Ok Curson
Thanks for the information. 

So we believe these ADS were created upon Windows being upgraded.  Being that they are replaced/recreated every time the machine is rebooted there seems to be a mechanism in place to recreate them.

Title: Re: question on ADS found with roguekiller
Post by: Curson on July 11, 2018, 03:17:43 PM

Hi ItsMeAgain,

Unfortunately, this is pure speculation since this is not documented by Microsoft.
I've seen the ADS often, and they only appeared on Windows 10 systems.

Regards.