Author Topic: question on ADS found with roguekiller  (Read 6195 times)

0 Members and 1 Guest are viewing this topic.

July 05, 2018, 10:52:35 PM

ItsMeAgain

  • Newbie

  • Offline
  • *

  • 3
  • Reputation:
    0
    • View Profile
question on ADS found with roguekiller
« on: July 05, 2018, 10:52:35 PM »
I have a client pc that was acting strangely- very slow.  Roguekiller found 4 ADS and claimed to have removed but a subsequent scan immediately finds 2 of 4 still there and all 4 there after a reboot.  I admit to not having a great deal of knowledge concerning ads but realize they are data 'forked" into other files that are likely legit.  I'm hoping for some guidance to know what is in the ADS' that RK is detecting.  Here's a screen shot.  I can supply the actual files if that will help
Thanks


Reply #1July 05, 2018, 11:37:39 PM

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2809
  • Reputation:
    100
    • View Profile
Re: question on ADS found with roguekiller
« Reply #1 on: July 05, 2018, 11:37:39 PM »
Hi ItsMeAgain,

Welcome to Adlice.com Forum.
These are likely legit. Could you please attach RogueKiller JSON report with your next reply ?

Regards.

Reply #2July 07, 2018, 05:32:31 AM

ItsMeAgain

  • Newbie

  • Offline
  • *

  • 3
  • Reputation:
    0
    • View Profile
Re: question on ADS found with roguekiller
« Reply #2 on: July 07, 2018, 05:32:31 AM »
as requested

Reply #3July 08, 2018, 03:37:24 PM

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2809
  • Reputation:
    100
    • View Profile
Re: question on ADS found with roguekiller
« Reply #3 on: July 08, 2018, 03:37:24 PM »
Hi ItsMeAgain,

Thanks for your feedback.
It seems that this ADS are created in certain case, when Windows 10 is upgraded. We will fix this as soon as possible. For the time being, you can safely ignore such detections.

Regards.

Reply #4July 09, 2018, 04:33:28 PM

ItsMeAgain

  • Newbie

  • Offline
  • *

  • 3
  • Reputation:
    0
    • View Profile
Re: question on ADS found with roguekiller
« Reply #4 on: July 09, 2018, 04:33:28 PM »
Ok Curson
Thanks for the information. 

So we believe these ADS were created upon Windows being upgraded.  Being that they are replaced/recreated every time the machine is rebooted there seems to be a mechanism in place to recreate them.

Reply #5July 11, 2018, 03:17:43 PM

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2809
  • Reputation:
    100
    • View Profile
Re: question on ADS found with roguekiller
« Reply #5 on: July 11, 2018, 03:17:43 PM »
Hi ItsMeAgain,

Unfortunately, this is pure speculation since this is not documented by Microsoft.
I've seen the ADS often, and they only appeared on Windows 10 systems.

Regards.