Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

PsanHost.exe - stubborn orphan


  • Please log in to reply
15 replies to this topic

#1 Arbiebrown

Arbiebrown

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:34 AM

Posted 05 October 2016 - 04:50 AM

Long time lurker, first time poster

 

So: My lad (15) has a PC (w7 ult - 16Gb Ram - i5 CPU) which he though would be a great idea to download a bunch of unofficial mods for his games.

The obvious happened and his PC was full of malware and trojan.

Re-education at volume complete.

Malware and other hangers on removed and tidied up

 

However - part of the infection was to disable the various security installed and one of those was Panda cloud - 

 

Part of the tidy up therefore, was to add AVG and then remove Panda

Unfortunately the service host for Panda is stubbornly refusing to exit the building.

 

  • I have reinstalled Panda and then used the windows uninstaller - orphan still left behind
  • I have reinstalled Panda and then used the official Panda removal tool - orphan still left behind
  • I have manually stopped all the Panda related services that I can find and then hunted for the registry entries and files associated with Panda - deleted where found - orphan still left behind

The file is causing a slow startup

psanhost.jpg

and sporadic high CPU use that (sometimes) appears to be resulting in a black screen crash.

 

I've run out of (limited) skill and so turn to the BC community to unpick this for me - obviously I'd like to remove this from the system entirely (Panda is no longer installed), but I guess the least worst option would be to at least permanently prevent it running.

So - anyone help a feller out?



BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,964 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:34 AM

Posted 05 October 2016 - 05:04 AM

Have you checked with Panda Support?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 Arbiebrown

Arbiebrown
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:34 AM

Posted 05 October 2016 - 05:10 AM

First place I visited - cannot find any support for their free products - 

 

All support features for Panda require paid software apart from their free Antivirus Issues Forums - which is locked

 

:)



#4 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:11:34 AM

Posted 05 October 2016 - 05:20 AM

Have you tried Revo Uninstaller?

Using Revo Uninstaller in Safe Mode to prevent the offending file from starting might help with removal.

#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,964 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:34 AM

Posted 05 October 2016 - 05:28 AM

Anti-virus software components insert themselves deep into the operating systems core where they install kernel mode drivers that load at boot-up and create files/folders/registry entries in various locations. It is not uncommon for some anti-virus programs to not completely uninstall itself using the usual method of Programs and Features (Add/Remove Programs) in Control Panel or to result in various errors due to the presence of related services and processes running in the background.

Sometimes the uninstall works more effectively if you first stop and disable the program's service (and associated processes in Task Manager) or perform the removal in safe mode so there are less processes which can interfere with the uninstallation.

Alternatively, you can try using a third-party utility like Revo Uninstaller Free or Portable and follow these instructions for using it. Revo provides a listing of all installed software by installation date and when removing a program, Revo does a more comprehensive job of searching for and removing related registry entries, files and folders.


.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#6 Arbiebrown

Arbiebrown
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:34 AM

Posted 05 October 2016 - 05:34 AM

Thanks Sintharius and quietman - off to try that now



#7 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:11:34 AM

Posted 05 October 2016 - 05:40 AM

Keep us posted :)

#8 Arbiebrown

Arbiebrown
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:34 AM

Posted 05 October 2016 - 09:16 AM

Tried Revo in every way I could find - including reinstalling via Revo to allow it to log.

Still have the orphaned file - still trying to remove - will post back with any progress



#9 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,964 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:34 AM

Posted 05 October 2016 - 02:59 PM

Good luck.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#10 Arbiebrown

Arbiebrown
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:34 AM

Posted 06 October 2016 - 02:53 PM

No joy I am afraid - still stubbornly remains



#11 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,964 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:34 AM

Posted 06 October 2016 - 04:41 PM

Since the Panda Free Antivirus Forums is locked, did you try contacting one of the Admins or Moderators and ask where you can receive help?

You may have to register and login before having access to PMs.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#12 Arbiebrown

Arbiebrown
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:34 AM

Posted 11 October 2016 - 08:05 AM

Well.

The saga has ended.

 

No response to various messages to Panda - so gave up in the end and decided that it was a good time to rebuild windows and start again.

Clearly, this is not a proper solution - but the PC is running a little more quickly so not all bad I suppose.

Thanks to all that read and even thought about responding - and thanks particularly to those that did respond.

I guess this is fixed - although reinstalling Windows is probably a fix to most everything....



#13 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,964 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:34 AM

Posted 11 October 2016 - 08:09 AM

Over the years I have noted that sometimes a reinstall is the best solution when troubleshooting fails.


.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#14 bigwrench9

bigwrench9

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:34 AM

Posted 11 October 2016 - 09:51 AM

Lurker here, also.... have dealt with this kind of issue myself. I've used the "Panda Uninstaller" , found here on BC. It has worked for me.



#15 Arbiebrown

Arbiebrown
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:34 AM

Posted 11 October 2016 - 10:42 AM

Didn't work in this case, unfortunately




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users