Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Rising Antivirus


  • Please log in to reply
10 replies to this topic

#1 zippydan

zippydan

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:11:34 AM

Posted 07 September 2015 - 03:51 PM

Is this legit or is it scareware or what the hell is it?

I have a friend that "accidentally" installed this AntiVirus on their computer.

 

I have not been able to remove it.  95% of the interface is in Chinese.

 

It doesn't show up in Add/Remove Programs.

 

CCleaner doesn't see it.  Revo Uninstaller Pro doesn't see it.

 

Everything I use to try and force removal gets shut down by Rising Antivirus itself.  It has some kind of "shield" which prevents you from deleting or modifying any of its files.

 

I've tried using Revo Uninstaller to manually uninstall the directory, but a Rising popup comes up saying it has stopped the program

Same when I try to use CCleaner to delete the startup entry.

 

Junkware Removal Tool and AdwCleaner both got blocked as well.

 

Running in safe mode makes no difference.

 

I can't find an uninstall icon in the install directory.  There is a setup file, but running it does nothing.

 

I hate this program.

 

But IF it is legit, I feel like all I need to do is find out how to turn off the "shield" that is protecting it.  Unfortunately the menus and interface are all in Chinese, so I can't figure out where you turn it off.



BC AdBot (Login to Remove)

 


m

#2 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:05:34 PM

Posted 07 September 2015 - 04:37 PM

Hi there,

Rising Antivirus is a legit AV, albeit it's a Chinese one.

Since you mention it did not show up in Programs and Features, please run this to see if it's actually there or not.

Please download MiniToolBox, save it to your Desktop and run it. Place a checkmark in List Installed Programs, then click Go and post the contents of the MTB.txt file that it creates here.

#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,608 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:34 AM

Posted 07 September 2015 - 04:54 PM

Rising Antivirus is legit but according to their website.

We will terminate the Rising official English website, including website information, purchase and renew services and online technical support as from September 09, 2013.


The correct way to remove most programs is from within its program group Uninstall shortcut in Start Menu > All Programs or by using Programs and Features (Add/Remove Programs) in Control Panel.

Keep in mind that not all programs show up in Add/Remove Programs or Programs and Features in Control Panel. Some will have their own uninstaller, which can be found in the program's folder or Start Menu without the need to register in that location. This is typically by design as some vendors write installation routines so their program intentionally will not be included in the Add/Remove list. In some cases you may have to launch the antivirus setup (installation) file and in the menu there may be options listed to Reinstall, Repair, or Remove (uninstall).

Another alternative is Opswat AppRemover - supported applications list. This is a free utility that enables you to remove antivirus and security programs to include orphaned files left behind from incomplete uninstallations....How do I use AppRemover and other FAQs?

Sometimes the uninstall works more effectively if you first stop and disable the program's service (and associated processes in Task Manager) or perform the removal in safe mode so there are less processes which can interfere with the uninstallation.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#4 zippydan

zippydan
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:11:34 AM

Posted 08 September 2015 - 10:11 AM

Hi there,

Rising Antivirus is a legit AV, albeit it's a Chinese one.

Since you mention it did not show up in Programs and Features, please run this to see if it's actually there or not.

Please download MiniToolBox, save it to your Desktop and run it. Place a checkmark in List Installed Programs, then click Go and post the contents of the MTB.txt file that it creates here.

 

Does not show up in the MiniToolBox list:

MiniToolBox by Farbar  Version: 25-07-2015 01
Ran by redacted (administrator) on 08-09-2015 at 10:09:47
Running from "C:\Users\redacted\Downloads"
Microsoft Windows 8.1 Pro con Media Center  (X64)
Model: redacted Manufacturer: Sony Corporation
Boot Mode: Normal
***************************************************************************

=========================== Installed Programs ============================

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Actualización de NVIDIA 16.13.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 16.13.65 - NVIDIA Corporation) Hidden
Adblock Plus for IE (32-bit and 64-bit) (HKLM\...\{299AC820-3137-4AA8-865F-46B975E43A16}) (Version: 99.9 - Eyeo GmbH)
Adobe Reader XI (11.0.09) - Español (HKLM-x32\...\{AC76BA86-7AD7-1034-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Call Assistant (HKLM-x32\...\{979BD552-4999-4E73-9D4D-AF9C11639C93}) (Version: 2.5.11 - Allworx Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform)
doPDF (HKLM\...\{2FC5AA08-A4A7-4CA2-87CA-B591CDC29BFA}) (Version: 8.0.915 - Softland) Hidden
doPDF 8 (HKLM-x32\...\{bc8555e0-f2a4-4d0c-9063-97b6e92291f5}) (Version: 8.0.915 - Softland)
EPSON L555 Series Printer Uninstall (HKLM\...\EPSON L555 Series) (Version:  - SEIKO EPSON Corporation)
f.lux (HKCU\...\Flux) (Version:  - )
FileZilla Client 3.9.0.6 (HKLM-x32\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)
Google Chrome (HKLM-x32\...\{22ACCF34-7FF3-3990-B0DA-697C8A16F121}) (Version: 66.19.16495 - Google, Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.28.13 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Greenshot 1.1.9.13 (HKLM\...\Greenshot_is1) (Version: 1.1.9.13 - Greenshot)
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version:  - EFD Software)
Intel(R) Driver Update Utility 2.0 (HKLM-x32\...\{59DB38EB-F864-4E10-841D-38CFBCF864B0}) (Version: 2.0.0.29 - Intel) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{8409c4f7-2340-4933-a304-5d37db4fb48b}) (Version: 2.0.0.29 - Intel)
Internet Quick Access (HKCU\...\InternetQuickAccess) (Version: 45.0.2433.0 - Internet Quick Access)
Malwarebytes Anti-Malware versión 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft Office Profesional 2013 - es-es (HKLM\...\ProfessionalRetail - es-es) (Version: 15.0.4745.1002 - Microsoft Corporation)
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6012.0828 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version:  - Microsoft Corporation)
Mozilla Firefox 33.1 (x86 es-MX) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 es-MX)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.3 - Mozilla)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
novaPDF 8 add-in for Microsoft Office (x64) (HKLM\...\{F46F1A63-39F8-4678-BFDF-1D340A356323}) (Version: 8.0.915 - Softland)
novaPDF 8 add-in for Microsoft Office (x86) (HKLM-x32\...\{F5435F65-CFCE-4938-97BB-69BC67C56CA7}) (Version: 8.0.915 - Softland)
novaPDF 8 Printer Driver (HKLM\...\{5ED19569-C344-4C55-983F-AAF03CE33723}) (Version: 8.0.915 - Softland)
NVIDIA Controlador de gráficos 344.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.4 - NVIDIA Corporation)
NVIDIA Software del sistema PhysX 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.4745.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.4745.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-0C0A-0000-0000000FF1CE}) (Version: 15.0.4745.1002 - Microsoft Corporation) Hidden
Panel de control de NVIDIA 344.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 344.65 - NVIDIA Corporation) Hidden
Paquete de controladores de Windows - Sony Corporation (SFEP) HIDClass  (06/18/2012 8.0.2.4) (HKLM\...\54DCDF5F20965812FBF3C1C44CE2E9E620585DE9) (Version: 06/18/2012 8.0.2.4 - Sony Corporation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7177 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.1.4 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.4 - VS Revo Group, Ltd.)
Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version:  - )
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 3.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 16.13.65 - NVIDIA Corporation) Hidden
Software Intel(R) PROSet/Wireless NFC (HKLM\...\{6328DC19-F56E-4646-8FD6-9A4BD3C72E50}) (Version: 1.1.1.002 - Intel Corporation) Hidden
Software Intel(R) PROSet/Wireless NFC (HKLM\...\Software Intel(R) PROSet/Wireless NFC) (Version: 1.1.1.002 - Intel Corporation)
Spark 2.7.0.665 (HKLM-x32\...\3057-7228-2063-7466) (Version: 2.7.0.665 - Ignite Realtime)
Speccy (HKLM\...\Speccy) (Version: 1.26 - Piriform)
Stardock ModernMix (HKLM-x32\...\Stardock ModernMix) (Version: 1.20 - Stardock Software, Inc.)
Stardock Start8 (HKLM-x32\...\Stardock Start8) (Version: 1.47 - Stardock Software, Inc.)
SumatraPDF (HKLM-x32\...\SumatraPDF) (Version: 3.0 - Krzysztof Kowalczyk)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1158 - SUPERAntiSpyware.com)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.5.0 - Synaptics Incorporated)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.41110 - TeamViewer)
UltraVnc (HKLM\...\Ultravnc2_is1) (Version: 1.2.0.4 - uvnc bvba)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)
VMware vSphere Client 5.5 (HKLM-x32\...\{4CFB0494-2E96-4631-8364-538E2AA91324}) (Version: 5.5.0.4216 - VMware, Inc.)
webplugin.exe version 3.1.0.4 (HKLM-x32\...\{ED02ABD7-1049-4984-A35A-26ABEC69E2E0}_is1) (Version: 3.1.0.4 - )
WinDirStat 1.1.2 (HKCU\...\WinDirStat) (Version:  - )

**** End of log ****



#5 zippydan

zippydan
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:11:34 AM

Posted 08 September 2015 - 10:34 AM

Rising Antivirus is legit but according to their website.

We will terminate the Rising official English website, including website information, purchase and renew services and online technical support as from September 09, 2013.

The correct way to remove most programs is from within its program group Uninstall shortcut in Start Menu > All Programs or by using Programs and Features (Add/Remove Programs) in Control Panel.

Keep in mind that not all programs show up in Add/Remove Programs or Programs and Features in Control Panel. Some will have their own uninstaller, which can be found in the program's folder or Start Menu without the need to register in that location. This is typically by design as some vendors write installation routines so their program intentionally will not be included in the Add/Remove list. In some cases you may have to launch the antivirus setup (installation) file and in the menu there may be options listed to Reinstall, Repair, or Remove (uninstall).

Another alternative is Opswat AppRemover - supported applications list. This is a free utility that enables you to remove antivirus and security programs to include orphaned files left behind from incomplete uninstallations....How do I use AppRemover and other FAQs?

Sometimes the uninstall works more effectively if you first stop and disable the program's service (and associated processes in Task Manager) or perform the removal in safe mode so there are less processes which can interfere with the uninstallation.

 

 

  1. Rising Antivirus does not appear in Programs and Features (Add/Remove Programs).
  2. CCleaner does not detect it as an installed program, nor Revo Uninstaller Pro.
  3. If I point Revo Uninstaller Pro to the installed directory (C:\Program Files (x86)\Rising), it does detect the program, and attempts to uninstall it, but then Rising itself blocks the operation.
  4. I installed OpSwat AppRemover, and it also fails to detect Rising as an installed program.
  5. I don't know what original setup program was used to install the AV, but I have tried running Setup.exe (as Administrator) that exists in C:\Programs Files (x86)\Rising\RSD, and nothing happens.
  6. I have running taskmgr.exe (as Administrator) and tried Force-ending each individual process (there are 4 or 5 with Chinese characters), but the processes do not terminate: no error is given they just keep running.
  7. I have tried disabling the associated services ("QQPCMgr RTP Service" and "Rav Sevice" in services.msc), but even though the current states shows as "Running", the options for "Start" "Stop" "Pause" "Restart" are all greyed out and unavailable.  Automatic startup is set to disabled already, but they start automatically anyway, and that option is also greyed out.  If I try to stop them via task manager it tells me something like "The command is not valid for this type of service".  There is one other service that might related called "Rsd Service" but I can't even open the properties for the service: it gives me a "File not found" error.
  8. I have tried all of these options in Safe Mode and still have the same problems.
     

Edited by zippydan, 08 September 2015 - 10:35 AM.


#6 severac

severac

  • Members
  • 872 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:06:34 PM

Posted 08 September 2015 - 12:32 PM

We have problems with Rising antivirus also here


I would like to help you to remove malware. Let's look inside.   :busy:

But I don't know to solve all PC problems.  :smash: 

 


#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,608 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:34 AM

Posted 08 September 2015 - 02:17 PM

There is a Rising Support website but it is only in Chineese.

The notice on the former English website contains this information.

you may call customer service (8610) 82678800 or 4006608866 (toll-free) for further help.


.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#8 severac

severac

  • Members
  • 872 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:06:34 PM

Posted 08 September 2015 - 04:09 PM

I think that it is cheaper to reinstall than to call that number.

 

We will find the way. :warrior:


I would like to help you to remove malware. Let's look inside.   :busy:

But I don't know to solve all PC problems.  :smash: 

 


#9 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,608 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:34 AM

Posted 09 September 2015 - 11:23 AM

No information is provided in regard to cost of support on the former English site and specific information on the primary site is written in Chinese. Without a translator, any associated costs would be speculation.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#10 yacCopiedMBAMxd

yacCopiedMBAMxd

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:34 AM

Posted 14 January 2016 - 01:50 PM

Hmm... I got Rising by downloading some installer for a game cheat tool. It came together with bunch of Adware, Opera Browser (wtf i never asked for that) and some chinese program. I didn't see it on Programs and features either, but this is how i got rid of it: I installed Kaspersky, and it detected it as a program uncompatible with Kaspersky (or something like that, it happened a long time ago so i forgot), so it suddenly showed up on the Programs and Features. I deinstalled it by clicking some buttons in the Uninstaller (it was in Chinese). After that, I rebooted my PC and boom! It's gone. Also, Rising never did anything 4 me. It just stayed in the program folder and did nothing but slow down my PC. There was even no desktop shortcut... Anyways, hope i helped.

Regards,
Mata

#11 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,608 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:34 AM

Posted 14 January 2016 - 02:02 PM

A lot of software comes bundled with other free software you download from the Internet these days...it has become a fact of life.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users