chore: remove AdwCleaner from scanner chain
AdwCleaner requires both elevated privileges and an interactive desktop session simultaneously -- SYSTEM context is elevated but Session 0 (no desktop), user_session has a desktop but a non-elevated WTS token. Removing for now; will re-add with schtasks InteractiveToken dispatch when that mechanism is implemented. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -24,30 +24,6 @@
|
|||||||
"wait_on_process": null,
|
"wait_on_process": null,
|
||||||
"session0_compatible": true
|
"session0_compatible": true
|
||||||
},
|
},
|
||||||
{
|
|
||||||
"name": "AdwCleaner",
|
|
||||||
"category": "adware",
|
|
||||||
"exe": "C:\\GuruScan\\downloads\\adwcleaner.exe",
|
|
||||||
"installer_exe": null,
|
|
||||||
"installer_args": null,
|
|
||||||
"run_update_after_install": false,
|
|
||||||
"download_url": "https://adwcleaner.malwarebytes.com/adwcleaner?channel=release",
|
|
||||||
"manual_download": true,
|
|
||||||
"manual_download_note": "Malwarebytes blocks automated downloads; download manually from https://www.malwarebytes.com/adwcleaner",
|
|
||||||
"scan_args": ["/eula", "/scan", "/noreboot", "/path", "{LOG_ROOT}"],
|
|
||||||
"clean_args": ["/eula", "/clean", "/noreboot", "/path", "{LOG_ROOT}"],
|
|
||||||
"log_src": "{LOG_ROOT}\\Logs",
|
|
||||||
"timeout_min": 60,
|
|
||||||
"randomize_exe": false,
|
|
||||||
"pre_close_processes": [],
|
|
||||||
"pre_clean_paths": ["C:\\AdwCleaner"],
|
|
||||||
"post_clean_paths": [],
|
|
||||||
"service_names": ["AdwCleanerSvc"],
|
|
||||||
"hitmanpro_trial_reset": false,
|
|
||||||
"whitelist_arg": null,
|
|
||||||
"wait_on_process": "AdwCleaner",
|
|
||||||
"session0_compatible": false
|
|
||||||
},
|
|
||||||
{
|
{
|
||||||
"name": "Emsisoft",
|
"name": "Emsisoft",
|
||||||
"category": "antimalware",
|
"category": "antimalware",
|
||||||
|
|||||||
Reference in New Issue
Block a user