Is aswrec.dll (opencandy) adware removable?

The aswrec.dll file that was located by two anti virus programs after a herdProtect scan was later located by me in the avast files on my computer. It is an opencandy file that is automatically bundled with some software but apparently cannot be deleted. I have tried several times with herdProtect but no success. I also tried to manually remove it but was denied access and was told that only the administrator could remove it. I am the administrator of my computer.

Is this adware removable?

Asked May 18 '14 at 4:40

daffy

delete avast as it is the carrier of openCandy. if this fails try again. - daffy 120 months ago

Add a comment

3 Answers

Try deleting avast as it contains openCandy.

Answered May 25 '14 at 12:14

daffy

Add a comment

aswrec.dll is the recommendation engine that comes with the free version of Avast. In order to subsidize the free anti-virus version, Avast uses OpenCandy to provide additional offers to the end user (way after installation). These offers can range from anything such as a 'security' toolbar to additional browser extension and some utilities. The types of offers that you see will be based on what is already installed on your PC as well as the your PC's physical location. Some time after Avast is installed and running, you might see a popup for a recommended product, that you can choose to install or not. Be careful, some of the offers are designed to 'hijack' or modify your web browser;s home and search pages, again, this is how Avast makes money.

While the file (along with some others) are distributed via Avast and are located in the Avast folder, and even protected if you have Avast file system protection enabled, you can safely remove these files as you may inadvertently install an offer. If you have Avast file protection installed, removing the file manually or even through the herdProtect remove process may require a restart if you can delete it at all. However, you can simply boot to Windows Safe-mode and remove the file.

If you are having trouble removing aswrec.dll (signed by OpenCandy Inc.) with herdProtect follow these steps to run herdProtect in safe-mode:

Restart your PC in safe-mode by powering off your computer.
Restart your computer and immediately start pressing the F8 key, located on your keyboard. Continue to press F8 repeatedly until the Boot Menu appears.
Select Safe Mode with Networking from the list of options using the arrow keys on your keyboard, followed by the Enter key.
Log on to your computer if prompted. Once logged in you will notice that the desktop looks different when compared to booting up your computer in normal mode.
Run another herdProtect scan and locate and remove aswrec.dll from the detections.
Note, if your network was not available, just open your last herdProtect scan (don't run a new scan) and locate the file from there.

Answered Jun 3 '14 at 12:27

Joeyc

149

Add a comment

If it is the version that ships with Avast! then note that it simply provides you with offers for Avast!, nothing else. It doesn't offer you toolbars that "hijack" your browser or anything else - it will simply offer you, very infrequently, discounts on paid-versions of Avast!.

It also pushes out security news - i.e. when CryptoLocker was first making an appearance they had popups relating to a news article telling you how to prevent damage.

It's detection by herdprotect is a false positive - note it is only detected by 2/68, and at least one has a terrible reputation.

Answered Jun 9 '14 at 7:55

Khablam

Add a comment

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

Not the answer you're looking for? Ask your own question.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.