Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Rollback Rx has nearly used all my free space - uninstalled


  • Please log in to reply
14 replies to this topic

#1 perkydiode

perkydiode

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:30 PM

Posted 09 October 2016 - 03:13 PM

Hi.  

Win’ XP Pro.  Version 2002.  SP3 (32 bit) 

Avast anti-virus 

Comodo firewall 

HDD 200GB  (only 5GB free) 

 

Unsure where to post – so started here. 

 

Installed Rollback Rx by Horizon Data Systems quite a while ago. 

Uninstalled, using Revo Uninstaller not long ago. 

Using Search Everything, couldn't find any ‘remnants.’ 

But… Rollback still, occasionally, taking snap-shots before Win’s loads. 

Have now realised that only about 5 GB free space left on HDD. 

Internet searching has me think that MFR (MFT?) may have been modified;

therefore, frightened to try anything to try and get rid of anything to do with

Rollback – even if I thought I knew how to.    

 

There are other things amiss with the Win’s install I suspect – but have no

O/S disc to try a ‘repair.’ 

 

To start with, want to get rid of everything relating to Rollback; then take it from there. 

 

Convinced no malware infection. 

 

Any help would be much appreciated. 

 

Richard

 



BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,565 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:12:30 PM

Posted 09 October 2016 - 04:05 PM

Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
Also...please Publish a Snapshot using Speccy taking care to post the link of the snapshot in your next post.

   Go to Piriform's website, and download the free version on the left.  Click Download from Piriform.com (the FileHippo link requires an extra click). Or if you want to use a portable version of Speccy (which doesn't require installation), click the builds page link and download the portable version. You will now be asked where you want to save the file. The best place to put it is the Desktop, as it will be easy to find later.

    After the file finishes downloading, you are ready to run Speccy. If you downloaded the installer, simply double-click on it and follow the prompts until installation is complete. If you downloaded the portable version, you will need to unzip it before use. Right-click the ZIP file and click Extract all. Click Next. Open up the extracted folder and double-click on Speccy.
 
     Once inside Speccy, it will look similar to this (with your computer's specifications, of course): p22004369.gif

     Now, at the top, click File > Publish Snapshot. You will see the following prompt:

p22004371.gif

     Click Yes > then Copy to Clipboard

p22004372.gif

Now, once you are back in the forum topic you are posting in, click the p22004370.gif button. Right-click in the empty space of the Reply box and click Paste. Then, click Add Reply below the Reply box.

 

Louis



#3 perkydiode

perkydiode
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:30 PM

Posted 09 October 2016 - 05:08 PM

Thank you Louis.  Doing my best.  I'm very slow.  

Will follow up with Speecy if ok.  

 

MiniToolBox by Farbar  Version: 17-06-2016
Ran by User (administrator) on 09-10-2016 at 22:56:40
Running from "C:\Documents and Settings\User\Local Settings\Temp\scoped_dir2624_11865"
Microsoft Windows XP Professional Service Pack 3 (X86)
Model: HP Compaq dc7700p Small Form Factor Manufacturer: Hewlett-Packard
Boot Mode: Normal
***************************************************************************
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (10/09/2016 08:00:10 PM) (Source: Application Error) (User: )
Description: Faulting application spoolsv.exe, version 5.1.2600.6024, faulting module unknown, version 0.0.0.0, fault address 0x4ec674b2.
Processing media-specific event for [spoolsv.exe!ws!]
 
Error: (10/09/2016 07:41:18 PM) (Source: Application Error) (User: )
Description: Faulting application spoolsv.exe, version 5.1.2600.6024, faulting module unknown, version 0.0.0.0, fault address 0x4ec67456.
Processing media-specific event for [spoolsv.exe!ws!]
 
Error: (10/09/2016 01:10:52 PM) (Source: LMS) (User: NT AUTHORITY)
Description: LMS Service cannot connect to HECI driver
 
Error: (10/09/2016 11:59:49 AM) (Source: LMS) (User: NT AUTHORITY)
Description: LMS Service cannot connect to HECI driver
 
Error: (10/09/2016 11:52:04 AM) (Source: Application Error) (User: )
Description: Faulting application explorer.exe, version 6.0.2900.5512, faulting module unknown, version 0.0.0.0, fault address 0x038d4b93.
Processing media-specific event for [explorer.exe!ws!]
 
Error: (10/09/2016 11:23:58 AM) (Source: LMS) (User: NT AUTHORITY)
Description: LMS Service cannot connect to HECI driver
 
Error: (10/09/2016 11:16:16 AM) (Source: Application Error) (User: )
Description: Faulting application repair_windows.exe, version 3.9.0.12, faulting module gdi32.dll, version 5.1.2600.6460, fault address 0x0000ef40.
Processing media-specific event for [repair_windows.exe!ws!]
 
Error: (10/09/2016 10:06:02 AM) (Source: Application Error) (User: )
Description: Faulting application spoolsv.exe, version 5.1.2600.6024, faulting module unknown, version 0.0.0.0, fault address 0x4ec674b2.
Processing media-specific event for [spoolsv.exe!ws!]
 
Error: (10/09/2016 06:22:01 AM) (Source: LMS) (User: NT AUTHORITY)
Description: LMS Service cannot connect to HECI driver
 
Error: (10/09/2016 06:18:29 AM) (Source: Application Hang) (User: )
Description: Hanging application WINWORD.EXE, version 11.0.8411.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
 
 
System errors:
=============
Error: (10/09/2016 08:35:29 PM) (Source: Service Control Manager) (User: )
Description: The Print Spooler service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
 
Error: (10/09/2016 07:41:27 PM) (Source: Service Control Manager) (User: )
Description: The Print Spooler service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
 
Error: (10/09/2016 01:10:56 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
i8042prt
sfdrv01
sfhlp02
sfvfs02
 
Error: (10/09/2016 01:10:45 PM) (Source: 0) (User: )
Description: 
 
Error: (10/09/2016 11:59:53 AM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
i8042prt
sfdrv01
sfhlp02
sfvfs02
 
Error: (10/09/2016 11:59:41 AM) (Source: 0) (User: )
Description: 
 
Error: (10/09/2016 11:57:40 AM) (Source: Service Control Manager) (User: )
Description: The Application Layer Gateway Service service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (10/09/2016 11:57:39 AM) (Source: Service Control Manager) (User: )
Description: The Pml Driver HPZ12 service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (10/09/2016 11:57:39 AM) (Source: Service Control Manager) (User: )
Description: The Machine Debug Manager service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (10/09/2016 11:57:39 AM) (Source: Service Control Manager) (User: )
Description: The GeekBuddyRSP Server service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.
 
Microsoft Office Sessions:
=========================
Error: (10/09/2016 08:00:10 PM) (Source: Application Error)(User: )
Description: spoolsv.exe5.1.2600.6024unknown0.0.0.04ec674b2
 
Error: (10/09/2016 07:41:18 PM) (Source: Application Error)(User: )
Description: spoolsv.exe5.1.2600.6024unknown0.0.0.04ec67456
 
Error: (10/09/2016 01:10:52 PM) (Source: LMS)(User: NT AUTHORITY)
Description: LMS Service cannot connect to HECI driver
 
Error: (10/09/2016 11:59:49 AM) (Source: LMS)(User: NT AUTHORITY)
Description: LMS Service cannot connect to HECI driver
 
Error: (10/09/2016 11:52:04 AM) (Source: Application Error)(User: )
Description: explorer.exe6.0.2900.5512unknown0.0.0.0038d4b93
 
Error: (10/09/2016 11:23:58 AM) (Source: LMS)(User: NT AUTHORITY)
Description: LMS Service cannot connect to HECI driver
 
Error: (10/09/2016 11:16:16 AM) (Source: Application Error)(User: )
Description: repair_windows.exe3.9.0.12gdi32.dll5.1.2600.64600000ef40
 
Error: (10/09/2016 10:06:02 AM) (Source: Application Error)(User: )
Description: spoolsv.exe5.1.2600.6024unknown0.0.0.04ec674b2
 
Error: (10/09/2016 06:22:01 AM) (Source: LMS)(User: NT AUTHORITY)
Description: LMS Service cannot connect to HECI driver
 
Error: (10/09/2016 06:18:29 AM) (Source: Application Hang)(User: )
Description: WINWORD.EXE11.0.8411.0hungapp0.0.0.000000000
 
=========================== Installed Programs ============================
Adobe Flash Player 21 PPAPI (HKLM\...\Adobe Flash Player PPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Avast Free Antivirus (HKLM\...\avast) (Version: 12.3.2280 - AVAST Software)
Belarc Advisor 8.1 (HKLM\...\Belarc Advisor) (Version:  - )
Blocks (HKLM\...\{34E5E1AC-C112-4A57-BEDB-68C75A32FBC4}_is1) (Version: 1.29 - Crystal Office Systems)
Canon MP600 (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP600) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.22 - Piriform)
COMODO Firewall (HKLM\...\{C7C71F0C-4CC1-4B17-943C-96E5196DDA74}) (Version: 8.4.0.5165 - COMODO Security Solutions Inc.)
Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CP_Package_Variety1 (HKLM\...\{0611BD4E-4FE4-4a62-B0C0-18A4CC463428}) (Version: 53.0.13.000 - Hewlett-Packard) Hidden
CP_Package_Variety2 (HKLM\...\{B824B5C9-849F-4b9e-9EA7-6FD8CD8116DA}) (Version: 53.0.13.000 - Hewlett-Packard) Hidden
CP_Package_Variety3 (HKLM\...\{1C139D7D-9FEA-468d-A9C8-2A6E3BDE564A}) (Version: 53.0.13.000 - Hewlett-Packard) Hidden
Everything 1.3.4.686 (x86) (HKLM\...\Everything) (Version:  - )
Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 8.0.2.805 - Foxit Software Inc.)
Intel® Active Management Technology LMS Service and SOL Driver (HKLM\...\MESOL) (Version:  - )
Intel® Management Engine Interface (HKLM\...\HECI) (Version:  - )
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM\...\M2698023) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM\...\M2833941) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM\...\M979906) (Version:  - )
Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Standard Edition 2003 (HKLM\...\{91120409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Omron Health Management Software (HKLM\...\{E01DFD45-F13A-4F12-AC38-8EEE2163E52E}) (Version: 1.31.0002 - Omron Healthcare)
Opera Stable 36.0.2130.80 (HKLM\...\Opera 36.0.2130.80) (Version: 36.0.2130.80 - Opera Software)
PowerDVD (HKLM\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version:  - )
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 5.10.0.5645 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Smart Defrag 5 (HKLM\...\Smart Defrag_is1) (Version: 5.3.0 - IObit)
Speccy (HKLM\...\Speccy) (Version: 1.29 - Piriform)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.6.1042 - SUPERAntiSpyware.com)
Tetris (HKLM\...\{95E0E6DC-C308-4C96-BEDB-68C75A32FAF8}_is1) (Version: 1.63 - Crystal Office Systems)
TrackMania Nations ESWC 1.7.9 (HKLM\...\TmNations_is1) (Version:  - Nadeo)
Update for Windows XP (KB951978) (HKLM\...\KB951978) (Version: 1 - Microsoft Corporation) Hidden
WebFldrs XP (HKLM\...\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}) (Version: 9.50.7523 - Microsoft Corporation) Hidden
Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation)
Windows Media Format 11 runtime (HKLM\...\Windows Media Format Runtime) (Version:  - )
Windows Media Player 11 (HKLM\...\Windows Media Player) (Version:  - )
 
========================= Memory info: ===================================
Percentage of memory in use: 56%
Total physical RAM: 2039.21 MB
Available physical RAM: 878.88 MB
Total Virtual: 3935.34 MB
Available Virtual: 2596.86 MB
 
========================= Partitions: =====================================
1 Drive c: (Local Disk C:) (Fixed) (Total:189.92 GB) (Free:4.83 GB) NTFS
 
========================= Users: ========================================
User accounts for \\HP-DC7701
 
Administrator            ASPNET                   Guest                    
HelpAssistant            SUPPORT_388945a0         User                     
 
 
**** End of log ****

Edited by hamluis, 09 October 2016 - 06:40 PM.


#4 perkydiode

perkydiode
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:30 PM

Posted 09 October 2016 - 05:15 PM

http://speccy.piriform.com/results/T8mXPLs53F7e7POqO4e0hH2  

 

Hope this what expected.  

I expected 'screen-print.'  

 

Richard.



#5 hamluis

hamluis

    Moderator


  • Moderator
  • 56,565 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:12:30 PM

Posted 09 October 2016 - 07:11 PM

Info Re PC Cleaner Pro

 

You have insufficient free space on the C: partition, which probably impairs Windows.  Recommendation is approximately 15% of total C:  partition should be free space.

 

I suggest you move any data files (movies, games, music, photos) to storage via some other media...at least enough so that the C: partition will have nearly sufficient free space to function properly.

 

It also looks like you have a driver problem, see LMS Service Errors.

 

After the Windows partition has more free space...I further suggest that you run the chkdsk /r command and follow that with the sfc /scannow command.    These tools will help to minimize the prospect of problems with system files.

 

Louis



#6 perkydiode

perkydiode
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:30 PM

Posted 10 October 2016 - 09:24 AM

Thank you for your response Louis – certainly helped to crystallise my thinking. 

Apologies for the length of this post. 

 

1/ Unsure why the link to PC Cleaner Pro? 

Cannot find anything about it, on my PC, using Search Everything. 

 

2/ Fully understand, now, importance of getting sufficient free space. 

Programs need to be able to ‘breathe’ to do their job.  But… how to do? 

Particularly as Rollback, maybe, seems to want to fill it up again – don’t know. 

(Has taken a further 2/3 snap-shots since started this thread…) 

 

3/ Using CCleaner Disk Analysis: Pictures, Music, Documents, Videos and

Compressed files – take up less than 600MB.   

However, ‘Other’ files take up 188,969.35MB.  There’s all sorts in there. 

One or two I’ve looked at, are relating to programs installed and subsequently

uninstalled.  For sure, a couple of ‘apparent’ duplicates I noticed. 

 

4/  Unless you suggest differently, will leave the LMS Service Errors till

another time – haven’t yet checked it out. 

Stopping Rollback from working, and, creating more free space

seem to be what I should be concentrating on. 

 

5/  Will do as you say wrt running chkdsk /r, and, sfc /scannow -

when have plenty of free space. 

 

Seems to me: 

need to, urgently, stop Rollback Rx from working, and then, 

need to create much, much more free space – after Rollback has been stopped. 

Is there something I'm missing, in my thinking, about the sequence?   

 

How do you suggest going about these two tasks; particularly the first one. 

Concerned that if try to do manually, that might, inadvertently really, really mess things up. 

 

 

[Back story for anyone interested. 

Bought this PC second-hand 7/8 years ago – can’t remember exactly when. 

Had been used in a corporate setting.  Some software clean up required –

thereafter no problems; served my modest needs quite satisfactorily; even

though have installed/uninstalled all sorts of programs.      

I guess within the last year or so, decided to try PrivaZer, as recommended

by a UK computer magazine.  My bad!  I’m sure, in the right hands, it’s a useful tool,

but let it do it's own thing – for sure, something wasn’t quite right thereafter, and, recently uninstalled it. 

Then… again!  Based on a computer magazine talking it up, installed Rollback Rx. 

Forgotten exactly what, but something about it I wasn’t happy with. 

So decided to uninstall.  Now know, depending on your system maybe,

that Rollback may not uninstall thoroughly – perhaps PrivaZer had ‘nobbled’ 

something Rollback required – don’t know.] 

Basically, Rollback’s inadequate uninstall is what’s led to current situation –

that’s what I believe anyways.] 

 

Richard (UK)


Edited by perkydiode, 10 October 2016 - 09:28 AM.


#7 hamluis

hamluis

    Moderator


  • Moderator
  • 56,565 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:12:30 PM

Posted 10 October 2016 - 10:14 AM

Take a look at your Speccy data...PC Cleaner Pro is listed as a disabled AV program.

 

I see nothing that indicates the presence of Rollback on your system...nothing.  No process, no installed application.  I am curious as to how you think that it is installed and working.

 

Louis



#8 perkydiode

perkydiode
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:30 PM

Posted 11 October 2016 - 06:51 AM

1/  Thank you for the info’ wrt Speecy reporting PC Cleaner Pro is installed. 

Eventually found it under ‘Operating System;’ - hadn’t realised other programs are listed under that heading. 

(Also noted, that Speecy says, the Virus Signature Database is up to date!)  

 

MiniToolBox doesn’t list it as an installed program. 

Speecy says PC Cleaner is disabled - is that why it’s not listed on MiniToolBox? 

 

So why I can’t I find any other trace of it on my PC.  How does Speecy know?

I believe Speecy – but, what do I do to get rid of PC Cleaner Pro? 

 

Perhaps I have posted in the wrong area - should I be opening a new topic on another Bleeping Computer forum?

 

2/  Rollback Rx. 

What happens is, that before Windows starts to load, occasionally, a Rollback ‘splash’ image [don’t what to call it] is displayed; then a horizontal bar appears on the image – acts as though it’s scanning or loading something.   

(Sorry, don’t know what is correct terminology for these events.) 

Then Windows itself starts to load. 

This Rollback ‘splash’ image doesn’t occur every time I start computer up. 

 

Guess didn’t  make myself clear in previous posts. 

Using Revo Uninstaller, thought I had thoroughly uninstalled Rollback. 

Using Search Everything, couldn’t find any remnants of Rollback. 

Yet, this ‘splash’ image sometimes appears when I switch on; which has me believe that something relating to Rollback is still on my computer.   

 

I posted because am ignorant about what is, or is not, going on – and am concerned. 

Very little free space – don’t want to start manually deleting files; because I’m ignorant as how to safely go about this.   

How to ensure everything relating to Rollback is removed from computer. 

And now, how to get rid of PC Cleaner. 

Before trying to address any other issues. 

 

Perhaps too much to ask. 

 

3/   Have I posted in best Bleeping Computer forum?   

 

Maybe I do have an infection? 

Certainly something doesn’t add up. 

Looks like I have multiple issues with my computer. 

 

What do you suggest? 

 

Richard



#9 hamluis

hamluis

    Moderator


  • Moderator
  • 56,565 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:12:30 PM

Posted 11 October 2016 - 01:24 PM

There are two areas that must be checkled...to either find remants of a program or assuire yourself that said program is not on system.

 

  a.  Files.

 

  b.  Registry

 

Any uninstaller routine will normally check the file structure.  But many uninstall routines do not accurately check the registry for program components.

 

If I want to check the registry for file or program...I open regedit and then move the cursor to My Computer.  I then click Edit, then Find and hit Enter.  If there is an entry for said file/program...the results will reflect it.  If I don't want it, I delete it.  I then go back to Edit and click Find Next and it will go to the next item.  I continue doing this until I reach the end of all registry items and Windows tells me that no search items can be found.

 

As to what I would do...I posted the PC Cleaner Pro data so that the conclusion should be obvious.  I would have the system checked for malware in the Am I Infected forum.  I'm not sure whether PC Cleaner Pro is identified as a PUP or malware...but I believe a check for malware won't hurt and will remove one possible complicating factor from consideration.

 

Louis


Edited by hamluis, 11 October 2016 - 01:24 PM.


#10 ranchhand_

ranchhand_

  • Members
  • 1,778 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Midwest
  • Local time:12:30 PM

Posted 13 October 2016 - 11:13 AM

Re: your lack of space on your drive; I notice that you are running a small, 250gig drive so your needs are not great.

Here is what I do and it works for me and others I have helped.

> First, you must analyze what data you have and if you really need it on your main drive. I have found that most people keep photos, videos they like, music files, etc. on their main drive, but access them only occasionally as they are needed.

> After you have done that, purchase a 250gig hard drive; they are cheap now on Newegg.com or Amazon. Then install the new drive in your computer (very easy), format it only - no operating system installation. You will see your new drive assigned a drive letter in Explore. Now drag and drop all that data you have archived onto the new drive. You may suddenly find that you have 30-40% usable space appear on your main drive, thus solving that problem.


Help Requests: If there is no reply after 3 days I remove the thread from my answer list. For further help PM me.


#11 perkydiode

perkydiode
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:30 PM

Posted 13 October 2016 - 02:53 PM

Hi ranchand...  

Thanks for post.  Seems a good course of action to take.  

Like that I wouldn't be deleting anything.  If needs be, can move data back and forth.  

Nice one.  

 

Richard (UK)  

[Edit:  forgot to say had considered USB drive - but another HDD much better. 

Hadn't realised could be that easy.]  


Edited by perkydiode, 13 October 2016 - 03:38 PM.


#12 perkydiode

perkydiode
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:30 PM

Posted 13 October 2016 - 03:35 PM

Hi Louis.  Thanks for your last post - again, gave me something 'concrete' to chew on wrt checking registry.  

I have been playing around - with some caution of course.  

(Have created System Restore Point; yet mindful of my limited free space.)  

 

1/  PC Cleaner Pro.   

Speecy says installed, and, Belarc Advisor agrees.  

Only difference seems to be is, that Belarc say 'real time scanning off.'  

Fancy that would be a paid for option - which I wouldn't have gone for anyway.  

(Doesn't seem to get good press on much of the internet.)  

 

Searching the registry is revealing a big fat zero - nothing showing up at all.  

Tried using several different letter / word combinations as well.  

 

Not at all sure they will help, but intend to contact both organisations, hoping they will shine

some light on how their programs know it's on my PC.  

 

2/  Rollback Rx Home:  

Can only find one registry item.  

[ C:\Program Files\Shield\ShdServ.exe:*:Enabled:Rollback Rx Home ] 

Won't let me delete.  

Don't know what this 'shield' is - need to investigate further.  

 

Definitely thinking that perhaps not the best place to have posted to.  

My, initial, primary concerns are not to do with XP?  

But, down the line there may be XP specifics.  

 

Think the thread can be closed now, as have lots to check out, which will take me, I suspect, quite some time.  

 

Richard (UK)  



#13 hamluis

hamluis

    Moderator


  • Moderator
  • 56,565 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:12:30 PM

Posted 13 October 2016 - 04:08 PM

Good luck :)!

 

Louis



#14 TheITGUI

TheITGUI

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:11:30 AM

Posted 28 October 2016 - 08:22 AM

In my experience, RollBack Rx needs to be uninstalled from the Subconsole Menu (the loading screen during boot) for it to be totally uninstalled.

Also note, that if you're seeing space used up, RollBack handles data differently then a regular program. I've noticed that it'll often say that I have less space then I have because of it's encryption. For instance, it may encrypt the data and look like it's taking up 50 GB but then you look in there and it's less than that. The space is still available, but it's just not perceived as being available. It's ridiculous, but it's nothing to worry about.

If your primary concern is to free up that space and uninstall the program, uninstalling through the Subconsole Menu should do the trick.



#15 perkydiode

perkydiode
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:30 PM

Posted 29 October 2016 - 07:09 AM

TheITGUI:  Thank you for that information - never heard of the Subconsole Menu.  

 

I've already 'uninstalled' using Revo free uninstaller.  

Only trace I can find of Rollback is:  

C:\Program Files\Shield\ShdServ.exe:*:Enabled:Rollback Rx Home 

which, so far, unable to delete.  

 

At this point, do want to remove all traces of Rollback - will then look into 

the 'space' issue.  

 

Richard (UK) 






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users