Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Having trouble removing programs


  • Please log in to reply
11 replies to this topic

#1 bizemom365

bizemom365

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Visalia, CA
  • Local time:04:38 AM

Posted 02 October 2014 - 12:33 PM

Hi there,

 

I have a few programs I can't seem to uninstall.

uTorrent

YTdownloader

Knctr

Oas

 Avast is constantly blocking things from s few of these

programs

 

Please help.

 

Thanks

 

 



BC AdBot (Login to Remove)

 


m

#2 Animal

Animal

    Bleepin' Animinion


  • Site Admin
  • 34,284 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Where You Least Expect Me To Be
  • Local time:04:38 AM

Posted 02 October 2014 - 12:46 PM

Have you tried uninstalling them in safe mode? I'll let others weigh in on the possibility of infection/malware being present?

The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown (1938-1994)


A learning experience is one of those things that say, "You know that thing you just did? Don't do that." Douglas Adams (1952-2001)


"Imagination is more important than knowledge. Knowledge is limited. Imagination circles the world." Albert Einstein (1879-1955)


Follow BleepingComputer on: Facebook | Twitter | Google+

#3 bizemom365

bizemom365
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Visalia, CA
  • Local time:04:38 AM

Posted 02 October 2014 - 12:54 PM

No I haven't tried to uninstall in safe mode.



#4 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,001 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:04:38 AM

Posted 02 October 2014 - 12:56 PM

It looks like Knctr may be a virus.  Please do the following.

 

Please post what operating system you are running.

 

I'm going to guess that you are running either Windows 7 or Windows 8/8.1?

 

Go to the Control Panel and open Programs and Features and try to uninstall Knctr from there.

 

Please download Malwarebytes Anti-Malware.  After clicking on the link the download will start automatically.
 
1)  Double-click on mbam-setup.exe, then click on Run to install the application, follow the prompts through the installation.
 
2)  Malwarebytes will automatically open.  If this is the first time you have run this version of Malwarbytes you will see an image like the one below.
 
mbam1_zps95cc812c.png
 
Click on Update Now, after Malwarebytes is updated click on Scan.
 
If this isn't the first time you have run this version, then you will see an image like the one below.  Click on Scan
 
mbam1_zps98e7fba9.png
 
You will be prompted to update Malwarebytes, to do so click on Update Now.
 
 mbam2_zps85f38f0c.png
 
3)  The scan will automatically run now.
 
mbamreplace_zps3ead4824.png
 
 
4)  When the scan is complete the results will be displayed.  Click on Quarantine All, then click on Apply Actions
 
mbam4_zps23e52ad4.png
 
 
5)  To complete any actions taken you will be asked if you want to restart your computer, click on Yes
 
 mbam4_zps490948cc.png
 
6)  Please post the Malwarebytes log.
 
To find your Malwarebytes log,download mbam-check.exe from here and save it to your desktop.
 
To open the log double click on mbam-check.exe on your desktop.  When the log opens, scroll down toward the bottom of the log to Quarantined Items.  Copy and paste this in your next post.
________________________________________________________________
 

 
Please download AdwCleaner and install it.
 
When AdwCleaner opens you will see an image like the one below.
 
adwcleaner11_zps48314883.png
 
Click on Scan to start the scan.
 
Once the search is complete a list of the pending items will be displayed.  If you see any which you do not want removed, remove the check mark next to it.  
 
Click on Clean to remove the selected items.  If you have any questions about any items in the list please copy and paste the list in your topic so we can review it.  
 
You will receive a message telling you that all programs will be closed so that the infections can be removed.  Click on OK.
 
When the cleaning process is complete a log of what was removed will be presented.  Please copy and the paste this log in your topic.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#5 bizemom365

bizemom365
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Visalia, CA
  • Local time:04:38 AM

Posted 02 October 2014 - 01:15 PM

I am running windows 8



#6 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,001 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:04:38 AM

Posted 02 October 2014 - 01:26 PM

Cool, the instructions I posted will work on this machine.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#7 bizemom365

bizemom365
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Visalia, CA
  • Local time:04:38 AM

Posted 02 October 2014 - 01:30 PM

i was able to uninstall Knctr.

I already have malwarebytes, but am running another scan. In the past it has come back clean.



#8 bizemom365

bizemom365
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Visalia, CA
  • Local time:04:38 AM

Posted 02 October 2014 - 01:49 PM

# AdwCleaner v3.311 - Report created 02/10/2014 at 11:43:32
# Updated 30/09/2014 by Xplode
# Operating System : Windows 8.1  (64 bits)
# Username : Office - 2013-OFFICE-PC
# Running from : C:\Users\Office\Downloads\AdwCleaner (3).exe
# Option : Clean
 
***** [ Services ] *****
 
Service Deleted : sbmntr
 
***** [ Files / Folders ] *****
 
Folder Deleted : C:\Program Files (x86)\GetPrivate
Folder Deleted : C:\Program Files (x86)\YTDownloader
Folder Deleted : C:\Users\Office\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp
Folder Deleted : C:\Users\Office\AppData\Roaming\GetPrivate
Folder Deleted : C:\Users\Office\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader
Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
Folder Deleted : C:\Users\Office\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
Folder Deleted : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\Office\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\Office\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\Office\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\Office\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
[!] Folder Deleted : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngaogecalikpglidmdpamlocgmanpnjd
 
***** [ Scheduled Tasks ] *****
 
Task Deleted : LaunchSignup
Task Deleted : PC Performer
Task Deleted : PC Speed Maximizer Schedule
Task Deleted : SMupdate1
Task Deleted : YTDownloader
 
***** [ Shortcuts ] *****
 
Shortcut Disinfected : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\Office\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\Office\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
 
***** [ Registry ] *****
 
Key Deleted : HKCU\Software\Google\Chrome\Extensions\iolllphbfidpiigenecjjflaefapfnef
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\iolllphbfidpiigenecjjflaefapfnef
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{22511E2E-7970-414E-BC7C-28D16C4AF54D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23C5311E-016D-4999-BCB1-499898429D6C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2C4B6DB8-6413-403B-A038-16A352CFE8B9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{46803190-228D-470E-90FE-F5E0CEA9C4F2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5180FE16-2E09-497B-9C8B-5A6F029ECECB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A4F6E1B3-469E-46EF-A936-FBA9D5EFD2B9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C97AF157-6A27-4F57-9D47-E2D3E4761B77}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ED0D2C81-7DB5-4599-B7C0-1033418B5672}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{ED721A76-8160-4DA0-A18E-7FD7C4574774}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{22511E2E-7970-414E-BC7C-28D16C4AF54D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{23C5311E-016D-4999-BCB1-499898429D6C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2C4B6DB8-6413-403B-A038-16A352CFE8B9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{46803190-228D-470E-90FE-F5E0CEA9C4F2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{5180FE16-2E09-497B-9C8B-5A6F029ECECB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A4F6E1B3-469E-46EF-A936-FBA9D5EFD2B9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C97AF157-6A27-4F57-9D47-E2D3E4761B77}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{ED0D2C81-7DB5-4599-B7C0-1033418B5672}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Key Deleted : HKCU\Software\usyndication.com
Key Deleted : HKLM\SOFTWARE\{6CC4BF79-7708-4ECB-8F2B-A11264A67989}
Key Deleted : HKLM\SOFTWARE\VBMZ
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FDB962F0-B5B8-9460-D12F-7966E97BAA43}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v11.0.9600.17278
 
 
-\\ Mozilla Firefox v22.0 (en-US)
 
[ File : C:\Users\Office\AppData\Roaming\Mozilla\Firefox\Profiles\gb4h5cze.default\prefs.js ]
 
 
[ File : C:\Users\Office\AppData\Roaming\Mozilla\Firefox\Profiles\[ofr2][opt]rs1\prefs.js ]
 
 
-\\ Google Chrome v35.0.1916.153
 
[ File : C:\Users\Office\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
Deleted [Extension] : ngaogecalikpglidmdpamlocgmanpnjd
 
*************************
 
AdwCleaner[R0].txt - [8795 octets] - [27/08/2013 20:53:08]
AdwCleaner[R1].txt - [14830 octets] - [20/12/2013 16:44:39]
AdwCleaner[R2].txt - [11404 octets] - [15/05/2014 08:29:05]
AdwCleaner[R3].txt - [3888 octets] - [17/07/2014 11:16:50]
AdwCleaner[R4].txt - [1938 octets] - [28/07/2014 09:24:33]
AdwCleaner[R5].txt - [10539 octets] - [02/10/2014 11:32:35]
AdwCleaner[S0].txt - [7880 octets] - [27/08/2013 20:56:17]
AdwCleaner[S1].txt - [14512 octets] - [20/12/2013 16:46:39]
AdwCleaner[S2].txt - [10721 octets] - [15/05/2014 08:31:09]
AdwCleaner[S3].txt - [3915 octets] - [17/07/2014 11:21:19]
AdwCleaner[S4].txt - [2007 octets] - [28/07/2014 09:26:47]
AdwCleaner[S5].txt - [10007 octets] - [02/10/2014 11:43:32]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt - [10068 octets] ##########


#9 bizemom365

bizemom365
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Visalia, CA
  • Local time:04:38 AM

Posted 02 October 2014 - 01:58 PM

Does anyone know what NVIDIA PhysX is?

or 

PunkBuster services?



#10 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,001 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:04:38 AM

Posted 02 October 2014 - 02:09 PM

If you are seeing Nvidia PhysX in Programs and Features this would be Nvidia drivers for you graphics.

 

The following is a quote from Wikipedia.

 

PunkBuster is a computer program that is designed to detect software used for cheating in online games.


Edited by dc3, 02 October 2014 - 02:11 PM.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#11 bizemom365

bizemom365
  • Topic Starter

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Visalia, CA
  • Local time:04:38 AM

Posted 02 October 2014 - 02:34 PM

Thanks so much . It seems everything has been fixed. avast is no  longer going crazy.



#12 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,001 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:04:38 AM

Posted 02 October 2014 - 02:37 PM

Post back in this topic if you have any more problems with this.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users