From d5614ce558224feac4d5a34bb582b6af998622c2 Mon Sep 17 00:00:00 2001 From: Howard Enos Date: Wed, 27 May 2026 06:43:42 -0700 Subject: [PATCH] chore: remove AdwCleaner from scanner chain AdwCleaner requires both elevated privileges and an interactive desktop session simultaneously -- SYSTEM context is elevated but Session 0 (no desktop), user_session has a desktop but a non-elevated WTS token. Removing for now; will re-add with schtasks InteractiveToken dispatch when that mechanism is implemented. Co-Authored-By: Claude Sonnet 4.6 --- projects/msp-tools/guru-scan/scanners.json | 24 ---------------------- 1 file changed, 24 deletions(-) diff --git a/projects/msp-tools/guru-scan/scanners.json b/projects/msp-tools/guru-scan/scanners.json index 65bcbf9..61fb0ca 100644 --- a/projects/msp-tools/guru-scan/scanners.json +++ b/projects/msp-tools/guru-scan/scanners.json @@ -24,30 +24,6 @@ "wait_on_process": null, "session0_compatible": true }, - { - "name": "AdwCleaner", - "category": "adware", - "exe": "C:\\GuruScan\\downloads\\adwcleaner.exe", - "installer_exe": null, - "installer_args": null, - "run_update_after_install": false, - "download_url": "https://adwcleaner.malwarebytes.com/adwcleaner?channel=release", - "manual_download": true, - "manual_download_note": "Malwarebytes blocks automated downloads; download manually from https://www.malwarebytes.com/adwcleaner", - "scan_args": ["/eula", "/scan", "/noreboot", "/path", "{LOG_ROOT}"], - "clean_args": ["/eula", "/clean", "/noreboot", "/path", "{LOG_ROOT}"], - "log_src": "{LOG_ROOT}\\Logs", - "timeout_min": 60, - "randomize_exe": false, - "pre_close_processes": [], - "pre_clean_paths": ["C:\\AdwCleaner"], - "post_clean_paths": [], - "service_names": ["AdwCleanerSvc"], - "hitmanpro_trial_reset": false, - "whitelist_arg": null, - "wait_on_process": "AdwCleaner", - "session0_compatible": false - }, { "name": "Emsisoft", "category": "antimalware",