Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I Cannot Uninstall 3 Registry Cleaners


  • Please log in to reply
9 replies to this topic

#1 EmGem91

EmGem91

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:28 AM

Posted 20 September 2012 - 08:57 AM

I'm running Windows Vista Service Pack 2. I have IE, FF, and Chrome as my internet browsers, but I currently use Chrome. I currently have 3 registry cleaners on my computer, and I'm sure they shouldn't be on there, but they are and I need help uninstalling them.

At some point, I had installed Registry Easy and I tried to uninstall it, but I keep getting this error message:
http://i54.photobucket.com/albums/g113/PrincessEmily91/registryeasy_zps1ef407ae.jpg

I get this box open when I try to uninstall Eusing Free Registry Cleaner:
http://i54.photobucket.com/albums/g113/PrincessEmily91/eusing1_zpsba5c7eb9.jpg
Then when I try to click "open" to see if it will go anywhere, I get this error message:
http://i54.photobucket.com/albums/g113/PrincessEmily91/eusing2_zpsfcbb38c8.jpg

I get this error message when I try to uninstall Auslogics Registry Cleaner:
http://i54.photobucket.com/albums/g113/PrincessEmily91/auslogics_zps36593d55.jpg

BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,122 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:11:28 AM

Posted 20 September 2012 - 09:47 AM

Give Revo a try. Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

Suggest you scan your computer with MBAM and Eset online scanner.
If those scans find malware, start a new topic in Am I Infected...........forum and
include the scans log results.

EDIT:
Malwarebytes.org
Free ESET Online Antivirus Scanner

Edited by buddy215, 20 September 2012 - 09:48 AM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 Nanobyte

Nanobyte

  • Members
  • 431 posts
  • OFFLINE
  •  
  • Local time:09:28 AM

Posted 20 September 2012 - 10:30 PM

I'm not sure that Revo will uninstall programs with the apps's uninstall info/program missing. Normally Revo runs the app's uninstall and then does it's clean up of left-overs. Still, it's worth a try as it's an excellent program.

If you cannot uninstall the cleaners, try re-installing so that the missing files are added back (which you can check in Explorer etc). If they are added back but the apps will not uninstall, make sure you AV software is not blocking the uninstalls from running. Registry Easy and Auslogics are run-of-the-mill so should not be a problem. I've not used Eusing.

#4 hamluis

hamluis

    Moderator


  • Moderator
  • 55,727 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:11:28 AM

Posted 21 September 2012 - 04:27 PM

IMO, those don't look like typical Windows error messages.

FWIW: http://forums.comodo.com/empty-t45340.0.html;msg327378

I'm moving your topic to Am I Infected.

Louis

#5 EmGem91

EmGem91
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:28 AM

Posted 21 September 2012 - 05:14 PM

Thanks guys, I wasn't able to uninstall them with Revo, but I was able to get them off using Perfect Uninstaller.

I used MBAM and had no infected files, ESET found an infected file and automatically quarantined it. For some reason, the program won't stay on my computer. It opens and then has to re-install each time I try to use it. I wasn't able to get a log, but it did find a trojan of some sort. I clicked on the ESET link given to me to download. I'm not sure if I should use a different program to get a log copied onto here?

#6 buddy215

buddy215

  • Moderator
  • 13,122 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:11:28 AM

Posted 21 September 2012 - 05:46 PM

  • Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
  • Copy and paste that log as a reply to this topic

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#7 EmGem91

EmGem91
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:28 AM

Posted 22 September 2012 - 12:52 AM

thanks.


ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=00b262fb4a60514cae00e9167154fb58
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-09-21 04:43:38
# local_time=2012-09-20 11:43:38 (-0600, Central Daylight Time)
# country="United States"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1024 16777215 100 0 17654 17654 0 0
# compatibility_mode=5892 16776574 100 100 25335699 184800778 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=138463
# found=1
# cleaned=1
# scan_time=9368
C:\Users\EmilyPawelski\AppData\Roaming\AVG\Rescue\PC Tuneup 2011\120618180813268.rsc Java/Exploit.Agent.NBS trojan (deleted - quarantined) 00000000000000000000000000000000 C
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=00b262fb4a60514cae00e9167154fb58
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-09-21 02:15:52
# local_time=2012-09-21 09:15:52 (-0600, Central Daylight Time)
# country="United States"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1024 16777215 100 0 54718 54718 0 0
# compatibility_mode=5892 16776574 100 100 25372763 184837842 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=137614
# found=0
# cleaned=0
# scan_time=6637
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=00b262fb4a60514cae00e9167154fb58
# end=stopped
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=false
# utc_time=2012-09-21 10:12:25
# local_time=2012-09-21 05:12:25 (-0600, Central Daylight Time)
# country="United States"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1024 16777215 100 0 89946 89946 0 0
# compatibility_mode=5892 16776574 100 100 25407991 184873070 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=85
# found=0
# cleaned=0
# scan_time=3

#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,190 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:12:28 PM

Posted 22 September 2012 - 09:33 PM

Have you reinstalled and then unistalled them?
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#9 EmGem91

EmGem91
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:11:28 AM

Posted 25 September 2012 - 12:14 PM

Yes, I successfully uninstalled them.

#10 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,190 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:12:28 PM

Posted 25 September 2012 - 08:17 PM

These look like scareware as it will not fix the problems till it is bought, and most of the problems are irrelevant.

Let's try it this way....




Run RKill....


Download and Run RKill
  • Please download RKill by Grinler from one of the 4 links below and save it to your desktop.

    Link 1
    Link 2
    Link 3
    Link 4

  • Before we begin, you should disable your anti-malware softwares you have installed so they do not interfere RKill running as some anti-malware softwares detect RKill as malicious. Please refer to this page if you are not sure how.
  • Double-click on Rkill on your desktop to run it. (If you are using Windows Vista, please right-click on it and select Run As Administrator)
  • A black screen will appear and then disappear. Please do not worry, that is normal. This means that the tool has been successfully executed.
  • If nothing happens or if the tool does not run, please let me know in your next reply

Do not reboot your computer after running rkill as the malware programs will start again. Or if rebooting is required run it again.


If you continue having problems running rkill.com, you can download iExplore.exe or eXplorer.exe, which are renamed copies of rkill.com, and try them instead.



Next run Superantisypware (SAS):

Download and scan with SUPERAntiSpyware Free for Home Users
  • Double-click SUPERAntiSpyware.exe and use the default settings for installation.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)
  • In the Main Menu, click the Preferences... button.
  • Click the Scanning Control tab.
  • Under Scanner Options make sure the following are checked (leave all others unchecked):
    • Close browsers before scanning.
    • Scan for tracking cookies.
    • Terminate memory threats before quarantining.
  • Click the "Close" button to leave the control center screen.
  • Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
  • On the left, make sure you check C:\Fixed Drive.
  • On the right, under "Complete Scan", choose Perform Complete Scan.
  • Click "Next" to start the scan. Please be patient while it scans your computer.
  • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
  • Make sure everything has a checkmark next to it and click "Next".
  • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
  • If asked if you want to reboot, click "Yes".
  • To retrieve the removal information after reboot, launch SUPERAntispyware again.
    • Click Preferences, then click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    • Please copy and paste the Scan Log results in your next reply.
  • Click Close to exit the program.
If you have a problem downloading, installing or getting SAS to run, try downloading and using the SUPERAntiSpyware Portable Scanner instead. Save the randomly named file (i.e. SAS_1710895.COM) to a usb drive or CD and transfer to the infected computer. Then double-click on it to launch and scan. The file is randomly named to help keep malware from blocking the scanner.


Now reboot to Normal and run MBAM (MalwareBytes):
After scan click Remove Selected, Post new scan log and Reboot into normal mode.



Please ask any needed questions,post logs and Let us know how the PC is running now.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users