Windows 10: This keeps showing up as spyware (?)

ADWcleaner keeps showing the following as spyware or something that needs to be "cleaned" (sorry if the terminology is wrong):

HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E45F3E8-2683-4824-A6BE-08108022FB36}

ADWcleaner removes it but at the end of the day when I check again it is back. Is there a way to block this from my computer?

:)

 

Picture keeps showing up as wallpaper

RicW-rw is correct, this has to be caused by malware . . .

Press Ctrl + Alt + Del to open Task Manager, on the Startup tab see if there is anything there that looks suspicious that may be causing this and disable it

Also Press Windows + R keys simultaneously to open the run dialog, type msconfig, click in the services tab and see if anything is suspicious there that is not Microsoft manufactured and uncheck it . . .

Finally if all this does not work, download an application called Autoruns from

HERE and somewhere on the list of autorun apps you should find the culprit . . .

 

Picture keeps showing up as wallpaper

Well it looks like there may be some sort of virus or malware involved here that is preventing normal function... I think you may need to look for help on this in the virus and malware section... also do a bit of web-searching to see if anyone else has had
problems with the site the problem image came from. Other than that, I'm out of ideas but sincerely hope you can fix this. I hate it when I get stuck with something not behaving correctly! - Best, Ric.

 

Hi.
You might try this:

Download and run RKILL
RKill Download
Post the log here that appears when it's finished.

Download and run ESET Poweliks remover tool (free)
How do I remove a Fileless (Poweliks or Gootkit) infection?ESET Knowledgebase

This will tell you if you are not infected with it.

Download and run Malwarebytes AntiRootkit tool and the Junkware Removal Tool
Malwarebytes | Internet Security Product Downloads from Malwarebytes
(scroll down to find these - they are both free)
If they find anything, please post here.

Reboot the computer. See if it's gone now.

 

Thanks for your reply. I've done as you asked and nothing was found. Just to be clear, ADWcleaner removes this reg key, but after using the computer it reappears. What I would like is something to permanently block it. Based on the name, I assume it is a Microsoft tracking/spyware key.

 

Do you have DoNotTrack installed in your browser?
ZoneAlarm Do Not Track Add-on 2.2.5.1213 by Abine - Should I Remove It?

 

I have do not track that IE and FF supply as add ons, but I don't have Zone Alarm.

 

That {6E45F3E8-2683-4824-A6BE-08108022FB36} is for DNT - DoNotTrack by Abine browser plugin. You can verify by uninstalling the DNT in your browsers, and it should be gone then for good.

 

I found it in internet explorer (manage ad-ons). It is listed as Not Available and is disabled. There is no apparent way to delete it. My only options are to enable or disable. Since it is already disabled I'm at a loss. Would you recommend going to the registry and deleting that line?

 

No, I wouldn't do that. You want to properly remove it - it's not any kind of malware or anything like that.
Here's what I would do:

1. Close all instances of IE
2. Go into Task Manager and also close any running instances of iexplore.exe in the Process Tab
3. Go to Programs and Features and uninstall it from your programs list

Failing that, you could download Avast's browser cleanup tool, or Malwarebytes JRT "Junkware removal Tool"

p.s. it is also known as "Blur" - not sure what it will be listed as in your programs.

EDIT: You do understand that DNT or Blur is a plugin to prevent web sites from tracking you, right? It's actually a useful add-on and I have used it with much success in the past.

If these steps don't work (which they should), you will have to reset IE.