SOLVED Can't get rid of "Anchor.Hss"
- Thread starter Murf
- Start date
- Joined
- May 10, 2010
- Messages
- 9,353
- Reaction score
- 1,587
anchor.hss is considered a PUP (Possible Unwanted Program) by SpybotS&D. It likely is part of something you installed such as a toolbar etc and may not even be harmful.
I recommend you run a virus scan in safe mode as described at the start of my post in this BSOD thread HERE.
If you do not have a virus then I suggest you look at recent installations and try uninstalling them to see if it goes away.
As I mentioned it might not be anything "bad" at all, SpybotS&D merely says it is possible.
I recommend you run a virus scan in safe mode as described at the start of my post in this BSOD thread HERE.
If you do not have a virus then I suggest you look at recent installations and try uninstalling them to see if it goes away.
As I mentioned it might not be anything "bad" at all, SpybotS&D merely says it is possible.
Hi Trainable,
Thanks for the reply. I opened in safe mode & ran my antivirus progs, but Anchor is still coming back. I am now deleting recently loaded or updated programs & checking after each deletion.
So, what does Anchor.Hss do? I have searched & only come up with that it might be an encryption program?
Murf
Thanks for the reply. I opened in safe mode & ran my antivirus progs, but Anchor is still coming back. I am now deleting recently loaded or updated programs & checking after each deletion.
So, what does Anchor.Hss do? I have searched & only come up with that it might be an encryption program?
Murf
- Joined
- May 10, 2010
- Messages
- 9,353
- Reaction score
- 1,587
I don't know. All I really found was the Spybot S&D log which listed it as a "Possibly Unwanted Program" so there is not much info on it. Which probably either makes it pretty new or something more likely harmless.
Well, from my deletions it seems Anchor.Hss appears after opening Foxfire. They had an update on 6/19, which is right about the time I noticed the program.
Do you think it is possible that they are encrypting to protect us given the recent news?
RE: your above 'note', yes, it's hard to escape advertizing....
Murf
Do you think it is possible that they are encrypting to protect us given the recent news?
RE: your above 'note', yes, it's hard to escape advertizing....
Murf
Last edited:
- Joined
- May 10, 2010
- Messages
- 9,353
- Reaction score
- 1,587
I did a check to see what the HSS filetype is and it is related to Adobe photoshop.
I'm guessing you mean Firefox (the browser) rather than "foxfire" and as I suggested it is very possible it has something to do with a toolbar ... or it could also be part of an add-in. But I don't believe it is from Mozilla itself.
Could just be a coincidence but i searched "Adobe Anchor" and did find some freeware called "Adobe Anchor Service CS4." By any chance did you install that?
I'm guessing you mean Firefox (the browser) rather than "foxfire" and as I suggested it is very possible it has something to do with a toolbar ... or it could also be part of an add-in. But I don't believe it is from Mozilla itself.
Could just be a coincidence but i searched "Adobe Anchor" and did find some freeware called "Adobe Anchor Service CS4." By any chance did you install that?
davehc
Microsoft MVP
- Joined
- Jul 20, 2009
- Messages
- 1,958
- Reaction score
- 502
Your instinct could possibly put you on the right track.
As trouble suggests, Anchor, or anchor free, is an addon in Firefox.. It is able to eliminate mandatory adverts and popups, whilst you are surfing. It is unlikely that it got into Firefox as an automatic installation, but, one never knows.
Have a look at your addons and see.
But. It is easily duplicated as a virus - certainly a possibility. Addons remain one of the easiest ways to plant a virus on a computer.
As trouble suggests, Anchor, or anchor free, is an addon in Firefox.. It is able to eliminate mandatory adverts and popups, whilst you are surfing. It is unlikely that it got into Firefox as an automatic installation, but, one never knows.
Have a look at your addons and see.
But. It is easily duplicated as a virus - certainly a possibility. Addons remain one of the easiest ways to plant a virus on a computer.
Last edited:
Hi guys, I have exactly same problem, Spybot has detected spyware Anchor.HSS every time I used it. It belongs to: PUPSC - it stands for potentionally unwanted program.
I use other programs to detect malware/virus/spyware/adaware as well. Programs are Spybot SD2, Malwarebytes, Advanced SystemCare 6, IOBit MalwareFighter, AVG, Super AntiSpyware. Only Spybot SD (1 - the old one) has detected the same problem again and again.
Every time I decide to scan my computer, I go to safe mod, since it is able to catch more unwanted stuff in my PC. Only spyware I have ever had problem removing was this one.
I looked at malware removal guide - Anchor.Hss thread here:
http://forums.spybot.info/showthread.php?68808-Manual-Removal-Guide-for-Anchor-Hss
but none of what was mentioned there I found anywhere on my PC. I checked regedit, I checked appdata,etc.
Not sure where can I located sysdir though, is it basically system32 folder? I checked that one, nothing there either.
Spyware still keeps coming back :/.
Any suggestions please? Is Anchor.Hss harmless or harmful?
I read what you wrote here, and I too have noticed Adobe Acrobat among addons in Firefox, I think it asked me for update few days ago, I declined it, and I can still see it asking for update among Firefox Addons.
Thanks.
I use other programs to detect malware/virus/spyware/adaware as well. Programs are Spybot SD2, Malwarebytes, Advanced SystemCare 6, IOBit MalwareFighter, AVG, Super AntiSpyware. Only Spybot SD (1 - the old one) has detected the same problem again and again.
Every time I decide to scan my computer, I go to safe mod, since it is able to catch more unwanted stuff in my PC. Only spyware I have ever had problem removing was this one.
I looked at malware removal guide - Anchor.Hss thread here:
http://forums.spybot.info/showthread.php?68808-Manual-Removal-Guide-for-Anchor-Hss
but none of what was mentioned there I found anywhere on my PC. I checked regedit, I checked appdata,etc.
Not sure where can I located sysdir though, is it basically system32 folder? I checked that one, nothing there either.
Spyware still keeps coming back :/.
Any suggestions please? Is Anchor.Hss harmless or harmful?
I read what you wrote here, and I too have noticed Adobe Acrobat among addons in Firefox, I think it asked me for update few days ago, I declined it, and I can still see it asking for update among Firefox Addons.
Thanks.
Last edited:
Hello Windows Experts!,
Yes, I do mean Firefox!
I had deleted Adobe Flash, but not reader since that had an earlier download date on it, before I had the problem. I don't have Photoshop, and don't see "Adobe Anchor Service CS4" in my list of installed programs. But I do now have something called, "Mozilla Maintenance Service" put on with the last update.
I'll keep looking & posting what I find....
Murf
Yes, I do mean Firefox!
I had deleted Adobe Flash, but not reader since that had an earlier download date on it, before I had the problem. I don't have Photoshop, and don't see "Adobe Anchor Service CS4" in my list of installed programs. But I do now have something called, "Mozilla Maintenance Service" put on with the last update.
I'll keep looking & posting what I find....
Murf
Last edited:
- Joined
- May 10, 2010
- Messages
- 9,353
- Reaction score
- 1,587
Well I don't know if anchor.hss is part of Mozilla Maintenance Service but from reading what that service is I know I don't like it. I'm not a fan of automatic updates in the first place (except for my anti-virus) so I don't like that Firefox installs that so it can override UAC to install updates.
I have Mozilla maintenance Service as well, but it shows 23.5 as installation date.
Where can I check most recent updates to my computer? At the recovery part of the control panel?
lol dude, I tried not opening mozilla firefox after restart, and I still got it (I removed it with spybot before restart, so it should not appear again, and yet it did).
Problem does not seem to be in firefox, OR if it is, one does not need to open mozilla itself to make anchor.hss present.
I wrote to Adobe forum:
http://forums.adobe.com/thread/1239873?tstart=0
But still, you can try asking in mozilla firefox, it is not excluded that problem may actually be in mozilla.
Last edited:
- Joined
- May 10, 2010
- Messages
- 9,353
- Reaction score
- 1,587
Murf, could you delete the file again then try Firefox again but instead of clicking the Firefox icon go to the start orb and choose run (bottom right of the start box menu unless you altered your explorer settings) and type:
Firefox –safe-mode
If it does not reappear this time it will prove whether or not it is part of native Firefox or just part of an addon that you added to Firefox.
Firefox –safe-mode
If it does not reappear this time it will prove whether or not it is part of native Firefox or just part of an addon that you added to Firefox.
Hello Windows Experts!
Today I removed all traces of Firefox from my computer & then reinstalled the latest version. I have had it open for a few hours, visiting some regular sites, and I think Anchor.Hss is gone.
I still have no idea where it came from, what it was really attached to, or what it did. But I think it is gone.
Murf
Today I removed all traces of Firefox from my computer & then reinstalled the latest version. I have had it open for a few hours, visiting some regular sites, and I think Anchor.Hss is gone.
I still have no idea where it came from, what it was really attached to, or what it did. But I think it is gone.
Murf
Hi guys, I am back, the problem kept coming back, so I reinstalled windows.
I let it update and download all the service packs, I downloaded all the previously mentioned antivirus/antispyware/antimalware software, scanned my computer with everything, everything was clear. Then day or so later I found 2! anchor.hss entries! I deleted both through spybot, and I also managed to delete the register folders anchor.hss appeared in.
There was nothing to be found for a day or so. Then next day, I found another location, and at different place again, Hkeyusers, etc., not sure where exactly. But it was a different location than the previous ones.
ALSO I think I know what anchor.hss does. Before reinstallation, my system restored itself to previous point, like, it deleted my keyboard language change option, wallpaper, removed icons from my task bar and set them to default, also I had mozilla firefox set as default browsret, it removed that option, removed my set screen resolution.
This is why I decided to reinstall windows. It formatted C. Now, after reinstallation, and these found entries (that I mentioned in the first section of this post), it AGAIN restored system to previous state. Also, when it restored back to previous state this time, I received a message saying that vprotect application has stopped working.
Does anyone have any clue how to get rid of it or how am I getting it?
Thanks!
I let it update and download all the service packs, I downloaded all the previously mentioned antivirus/antispyware/antimalware software, scanned my computer with everything, everything was clear. Then day or so later I found 2! anchor.hss entries! I deleted both through spybot, and I also managed to delete the register folders anchor.hss appeared in.
There was nothing to be found for a day or so. Then next day, I found another location, and at different place again, Hkeyusers, etc., not sure where exactly. But it was a different location than the previous ones.
ALSO I think I know what anchor.hss does. Before reinstallation, my system restored itself to previous point, like, it deleted my keyboard language change option, wallpaper, removed icons from my task bar and set them to default, also I had mozilla firefox set as default browsret, it removed that option, removed my set screen resolution.
This is why I decided to reinstall windows. It formatted C. Now, after reinstallation, and these found entries (that I mentioned in the first section of this post), it AGAIN restored system to previous state. Also, when it restored back to previous state this time, I received a message saying that vprotect application has stopped working.
Does anyone have any clue how to get rid of it or how am I getting it?
Thanks!
Last edited:
- Joined
- May 10, 2010
- Messages
- 9,353
- Reaction score
- 1,587