Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Wondershare helper compact


  • Please log in to reply
28 replies to this topic

#1 JamesGlasgowUK

JamesGlasgowUK

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:24 PM

Posted 10 February 2014 - 08:00 PM

Hi

I am new here so hello :-)

Unfortunately like many people I guess my first contact with your good selves is with a problem which I'm hoping you may be able to assist with.

I downloaded wondershare converter and I have since been having a lot of problems with my laptop which runs MS Windows 8 64 bit edition. I mainly use Chrome so became rather suspicious when my default search engine had changed from google to yahoo and it was mentioning spigot in the address bar.  I also noted that my avast anti-virus Chrome plugin had been disabled. I used ccleaner to remove spigot and adwcleaner to remove any other references thereof. Rather stupidly only used windows own add remove for wondershare and I still seem to have the support bit installed (which I'd like to get rid of). My reason for placing my enquiry here is as it doesn't seem easy to remove I doubt it's 100% above board.

I have run a search and received hits for wondershare in the following locations:
C:\Program Files (x86)\Common Files\Wondershare
C:\Program Files (x86)
C:\Program Data
C:\Users\James\Documents
C:\Users\James\AppData\Roaming
C:\Users\James\AppData\Local
C:\Program Files (x86)\Common Files\
And in my history

After some difficulty I have managed to run a malware bytes check which is still running at the moment.

Unfortunately as it is 1am here and I have work in the morning I will need to update you later on the progress of the malware bytes scan.

Please feel free to respond and I will take any advised action when I return from work tomorrow.

Many thanks in advance

All the best

James


Edited by JamesGlasgowUK, 11 February 2014 - 08:49 AM.


BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,679 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:05:24 AM

Posted 10 February 2014 - 08:45 PM

Welcome aboard p22002758.gif

 

Since you uninstalled Wondershare from Control Panel you can safely manually delete leftovers from mentioned locations (I'd assume those are mostly folders):

 

C:\Program Files (x86)\Common Files\Wondershare
C:\Program Files (x86)
C:\Program Data
C:\Users\James\Documents
C:\Users\James\AppData\Roaming
C:\Users\James\AppData\Local
C:\Program Files (x86)\Common Files\


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#3 JamesGlasgowUK

JamesGlasgowUK
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:24 PM

Posted 11 February 2014 - 03:12 AM

Hi Broni 

 

Thank you for your response.  The plot thickens it would appear that even though the program had been removed through Add/Remove and the PC rebooted Wondershare Studio was still working in the background (I had to close it in Task Manager).  I have removed those files but do you know of anywhere the files lurk elsewhere - I'd like to make sure its gone.

 

Many thanks again

 

James 



#4 JamesGlasgowUK

JamesGlasgowUK
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:24 PM

Posted 11 February 2014 - 03:35 AM

Hi Again

 

Malwarebytes has found nothing but I'm not altogether convinced ...  :killcomp:

 

 

Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org
 
Database version: v2014.02.10.09
 
Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16476
James :: JAMESASUSI7 [administrator]
 
Protection: Enabled
 
11/02/2014 07:58:13
mbam-log-2014-02-11 (07-58-13).txt
 
Scan type: Full scan (C:\|D:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled: 
Objects scanned: 386838
Time elapsed: 33 minute(s), 41 second(s)
 
Memory Processes Detected: 0
(No malicious items detected)
 
Memory Modules Detected: 0
(No malicious items detected)
 
Registry Keys Detected: 0
(No malicious items detected)
 
Registry Values Detected: 0
(No malicious items detected)
 
Registry Data Items Detected: 0
(No malicious items detected)
 
Folders Detected: 0
(No malicious items detected)
 
Files Detected: 0
(No malicious items detected)
 
(end)
 
 
Many thanks again
James


#5 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,679 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:05:24 AM

Posted 11 February 2014 - 11:09 AM

Download Autoruns for Windows: http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
No installation required.
Simply unzip Autoruns.zip file, and double click on autoruns.exe file to run the program.
NOTE. Windows Vista, 7 and 8 users right click on autoruns.exe, click "Run As Administrator".
Go File>Save, and save it as AutoRuns.txt file to know location.
You must select Text from drop-down menu as a file type:

p4436801.gif

Upload the file(s) here: http://www.sendspace.com/
Click on Browse button and navigate to the file you want to upload.
Click on Upload button.
Click on FIRST Copy Link button and paste the link in your next reply.


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#6 JamesGlasgowUK

JamesGlasgowUK
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:24 PM

Posted 11 February 2014 - 01:14 PM

Hi Broni

 

Thank you for your assistance so far :-) 

 

 

I have uploaded the output from autoruns to that site as requested, the link is below:

 

http://www.sendspace.com/file/rtd4rx

 

 

Many thanks again

 

James



#7 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,679 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:05:24 AM

Posted 11 February 2014 - 02:05 PM

Re-run Autoruns and click on "Logon" tab.

 

UN-check:

 

+ "Wondershare Helper Compact.exe"

 

Restart computer, re-run Autoruns, right click on the above entry and click "Delete".

 

Open Windows Explorer and delete following folder:

 

C:\Program Files (x86)\Common Files\Wondershare (if exists)


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#8 JamesGlasgowUK

JamesGlasgowUK
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:24 PM

Posted 11 February 2014 - 02:14 PM

Hi Broni

 

Probably a silly question but do I just uncheck and exit or save anything before exiting autoruns?  (Never used it before)

 

Thanks

 

James



#9 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,679 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:05:24 AM

Posted 11 February 2014 - 02:27 PM

You just close Autoruns.


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#10 JamesGlasgowUK

JamesGlasgowUK
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:24 PM

Posted 11 February 2014 - 02:45 PM

Hi Broni

 

Deleted the file from autoruns as advised and the folder is not present in Common Files :)

 

Thank you very much for all the assistance :)

 

James



#11 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,679 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:05:24 AM

Posted 11 February 2014 - 02:48 PM

You're very welcome p22002759.gif


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#12 Citizen Shane

Citizen Shane

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:04:24 AM

Posted 02 December 2014 - 09:30 PM

Hey Guys - in case you haven't figured it out yet, I just wanted you to know - I've had this EXACT same problem, and my custom-built OEM version of Windows 7 professional (64-bit) was giving me ALL kinds of headache due to this stupid F**king PARASITE.  So I opened my msconfig startup services window - after spending 2+ hours on the phone with Norton, which helped but STILL wasn't able to get rid of every trace of this bugger.  My right-click was taking up to 30 SECONDS TO PROCESS per-item, WINDOWS EXPLORER was constantly crashing (i.e., "Windows Explorer has stopped working".. not internet explorer, windows explorer...) and "Computer" was taking up to 1-5 minutes to load, etc. etc...  Like I said, I built this thing myself and NEVER experienced any symptoms even close to this.

 

So...

 

After uninstalling the program normally, as some of you have noticed, the "Wondershare Helper Compact.exe" will continue to stick-around, and even showup as a startup-service.  The way to get rid of it - and I'm telling you, the results were INSTANTENOUS - is not just to do a search for every trace of it in your systems-folder, but ALSO to search for it in the registry.

 

I found it, and it is safe to do.  Simply press the start button, type "run" and hit enter.  When the Run dialog appears, type "regedit."  Once you're in the big registry window with all those folders, simply collapse them all, select the Computer, and then under "Edit," select FIND.  Type WONDERSHARE.  Once you've located it (it should be in some kind of random location like "HKEY_Classes_Root, TypeLib," etc..) just right-click and select DELETE.  Then go back to your computer, conduct a search, and whatever traces of it you find still lingering (including the setup.exe), DELETE THEM.  Be sure not to delete the "run" folder, or anything else that doesn't explicitly say "wondershare" accidentally.  Your computer will go back to normal in an instant!


Edited by Citizen Shane, 02 December 2014 - 09:32 PM.


#13 TFGA

TFGA

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:24 AM

Posted 29 November 2015 - 08:21 PM

I just created an account here b/c I had/have a wondershare problem too.

 

Broni - I did just as you advised, and it worked for me also; thanks much.  But then I also tried Citizen Shane's suggestion, and when I right-click and delete, I get a dialog warning that deleting certain registry values could cause system instability.  Confirming the delete results in another dialog "Unable to delete all specified values".  Thus I still have WSHelper.exe knocking around in my registry.  I get the same result for files (no idea) called Wondershare Helper Compact (no extension), Image Host.exe (in two locations), Video Editor (no extension), a Wondershare folder with three files, one of which is a "uninstall jump page" (cbs.wondershare....etc; I'm not putting the entire url here).  These are all identified as type REG_SZ files - I do not know what that means.  Seems that I can't get the W-share stuff entirely off.  The problem I've had - W-share causing slow startup - seems to have been resolved with Broni's course of action.  How concerned should I be?

 

BTW I'm running Win 10 64-bit.  Thanks much for the advice already shared.                                       Regards.



#14 Harry_L

Harry_L

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:01:24 PM

Posted 06 April 2016 - 11:55 AM

HI guys, I know this is a very late reply and you have all probably moved on by now but what fixed it for me was just literally removing all those files that someone said after the Control Panel uninstallation!!!

 

-Harry_L



#15 dougkpga

dougkpga

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:10:24 PM

Posted 09 September 2016 - 07:17 PM

The uninstall from control panel and in the program does not work for me. The uninstall freezes.

 

If I delete the Program Folder and do all the other steps will it get rid of this?

 

Thanks Doug 






1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users