chore: remove AdwCleaner from scanner chain

AdwCleaner requires both elevated privileges and an interactive desktop
session simultaneously -- SYSTEM context is elevated but Session 0 (no
desktop), user_session has a desktop but a non-elevated WTS token.
Removing for now; will re-add with schtasks InteractiveToken dispatch
when that mechanism is implemented.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
2026-05-27 06:43:42 -07:00
parent 98f875131e
commit d5614ce558

View File

@@ -24,30 +24,6 @@
"wait_on_process": null,
"session0_compatible": true
},
{
"name": "AdwCleaner",
"category": "adware",
"exe": "C:\\GuruScan\\downloads\\adwcleaner.exe",
"installer_exe": null,
"installer_args": null,
"run_update_after_install": false,
"download_url": "https://adwcleaner.malwarebytes.com/adwcleaner?channel=release",
"manual_download": true,
"manual_download_note": "Malwarebytes blocks automated downloads; download manually from https://www.malwarebytes.com/adwcleaner",
"scan_args": ["/eula", "/scan", "/noreboot", "/path", "{LOG_ROOT}"],
"clean_args": ["/eula", "/clean", "/noreboot", "/path", "{LOG_ROOT}"],
"log_src": "{LOG_ROOT}\\Logs",
"timeout_min": 60,
"randomize_exe": false,
"pre_close_processes": [],
"pre_clean_paths": ["C:\\AdwCleaner"],
"post_clean_paths": [],
"service_names": ["AdwCleanerSvc"],
"hitmanpro_trial_reset": false,
"whitelist_arg": null,
"wait_on_process": "AdwCleaner",
"session0_compatible": false
},
{
"name": "Emsisoft",
"category": "antimalware",