CCleaner v6.x can't find RESTORO registry settings

Windows 8.1 on laptop with ccleaner v6.0.7

At one time I had RESTORO installed from www.restoro.com

It was removed; however, malwarebytes can find RESTORO registry settings as if they are malware.

But when I run ccleaner, registry cleaner, it can't find the registry settings for RESTORO.

Also auslogis registry cleaner was removed and CCleaner doesn't find all the resgistry settings to remove; but malwarebytes does find them but treats this software as malware.

I've attached the registry info that malwarebytes found but ccleaner didn't find so that they may be removed from the registry

CCLeaner_Registry_notfound.txt

CCleaner is not a malware removal tool, it's a junk file remover (with a couple of other maintanance tools).

If the leftover entries look 'valid' then CCleaner will leave them alone.

CCleaner can't/won't judge if any particular entry relates to malware or not.

Your Malwarebytes log shows all the detections there as PUP's.

PUP stands for Potentially Unwanted Programme - PUP's are not malware as such but something that you may not want on your machine, usually because it may be a security risk.


Malwarebytes is just alerting you to the fact that you may not want to keep that software on your machine.


(You may want to keep it, that's your choice).


More about PUP's: <a href="https://www.malwarebytes.com/blog/news/2016/02/how-to-avoid-potentially-unwanted-programs" ipsnoembed="true" rel="external nofollow">https://www.malwarebytes.com/blog/news/2016/02/how-to-avoid-potentially-unwanted-programs</a>

Let Malwarebytes quarantine/remove the offending entries.

If it isn't doing that automatically then change your MB settings or do it from the detection screen.

If you need help with using Malwarebytes see their forum: https://forums.malwarebytes.com/

ok. But since none of the above software RESTOR and auslogics registry cleaner are installed, I thought the purpose of CCleaners registry cleaner was to determine if the software was installed and then leave them alone (unless one uses ccleaners uninstall tool); otherwise, if registry data isn't associated with an installed program it finds it and asks to fix it - which is remove these extra entries. Not every installed program that when uninstalled removes all the registry entries it created but only some of them - which is poor software writing.

I.e. CCleaner can find the unwanted program registry entry for ISearch even though no program is installed for it that I know of, and yet is is able to detect and remove the registry entry for it. For this case, malwarebytes doesn't detect the registry entry for it. From past info on ISearch it is a form of malware/spyware.

From the MB log you clearly have related folders and files on your machine, some of them left over from the uninstalls.

(3 of them are installer files which are used to install what you later uninstalled so wouldn't have been removed by the uninstall, the others are leftovers).

The registry entries will be pointing to (at least some of) those. Which will be why CCleaner regards them as valid entries.

Folders:

C:\PROGRAM FILES (X86)\AUSLOGICS\REGISTRY CLEANER

C:\PROGRAMDATA\AUSLOGICS\REGISTRY CLEANER</em>

Files:

C:\WINDOWS\RESTORO.INI

C:\USERS\THANEINC\DOWNLOADS\REGISTRY_BACKUP\REGISTRY-CLEANER-SETUP.EXE

C:\USERS\THANEINC\DOWNLOADS\TOOLS\REGISTRY-CLEANER-SETUP.EXE

C:\USERS\THANEINC\DOWNLOADS\TOOLS\AUSLOGIC_REGISTRY-CLEANER-SETUP.EXE</em>

If you delete those folders and files CCleaner will probably then flag up the reg entries as being invalid

Used Malwarebytes to quarantine the entries and the delete them.

Surprised a registry clean/repair program such as auslogics couldn't completely remove its own registry entries vs. the purpose of the tool was to cleanup other peoples messes. So thats what happens when one runs multiple registry cleaner/repair tools to make up for deficiences between related tools let alone those that detect registry performance issues that when fixed, are undone by other registry tools that think that an issue exists. Other registry tools I've used awhile back are iobit.com tool that claims to find and cleanup leftover registry entries from uninstalls.

Reran ccleaner file and registry cleanup. It idn't find anything. So the files and registry entries are gone.

Now onto the ISearch toolbar issue since ccleaner found and removed one registry entry whereas malwarebytes didn't find anything - not even the registry entry for it.

Is ISearch a leftover of some program installed in the past? I have AVAST antivir and it didn't complain either. So I'll have to find a tool to run and make sure ISearch

is completely uninstalled considering the tool can change over time and maybe update itself. https://www.exterminate-it.com/malpedia/remove-isearch

Another tool to install or follow the manual steps.....

I've posted this issue to the malwarebytes forum and am waiting on response.

Trying to track down issues such as random popup up box for windows process not responding requiring me to signout and back into to clear it or o365 outlook randomily requiring a repair. So this isn't a ccleaner issue; however, it did tell me about the registry entry whereas the antimalware and antivir programs didn't even do that.

To add to the above. Malwarebytes adware tool and another from TSA didn't find anything either. So the ISearch registry entry may be just a fluke registry entry thats gone now.

If you are getting 'Process not responding' and other errors then there would seem to be something more than uninstalled leftovers going on.

You might want to consider letting an expert have a look over your system and help you clean and fix it.

You can get that done for free at various websites, as you are using Malwarebytes then I suggest there.

Start a topic in the malware removal sub-forum at Malwarebytes, they will check for errors and unneeeded stuff as well as malware and will get your machine cleaned up.

After looking at the logs you provide they will work with you to get it bak to normal and will often write you a file to run which will fix issues with your specific machine.


They do not (usually) ask for remote access to your machine, they guide you through things with occasionally a clean up file to run if needed.


If you want to do that then start here: <a href="https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/" ipsnoembed="true" rel="external nofollow">https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/</a>