Jump to content

Removal of previously used Anti-Virus Programs


Recommended Posts

I've been assisted by the MBAM forum many times in the past and still have a number of anti-virus programs that were not removed, typically as the last step after resolving the issue.  For example, FRST, ADW Cleaner, Combo Fix still remain after 2 or 3 years. My PC Windows XP runs fine but I would like to perform the clean up operations which I neglected to do after my last session. Can you walk me through the this final clean up step that uninstalls programs that are no longer needed?  It was a while back so I've even forgotten how to send you my current log file.

Thank you, 

moonshadow    

Link to post
Share on other sites

Hi moonshadow :)

Usually the tools and logs that we use in our clean-up process can be removed by running DelFix. It might have been forgotten at some point.

BWuhenj.pngDelFix
Follow the instructions below to download and execute DelFix.

  • Download DelFix and move the executable to your Desktop;
  • Right-click on DelFix.exe and select Spcusrh.pngRun as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users);
  • Check the following options :
    • Remove disinfection tools;
  • Once all the options mentionned above are checked, click on Run;
  • After DelFix is done running, a log will open. Please copy/paste the content of the output log in your next reply;

Also just for the records, these aren't Antivirus programs, but malware removal tools :) 

Link to post
Share on other sites

2 hours ago, fr33tux said:

Hello,

It should still work though, can you try in safe-mode?

I am not having issues with the tool. And yes it still works I use it all the time. Just wish it could be updated with the different tools that are being used during malware clean up. My main use for it is to delete restore points and create a new one on completion of my repairs on a computer. :P

Edited by Porthos
Link to post
Share on other sites

Thanks Aura, fr33tux, & Porthos:

Although I've used Safe Mode many time before, for whatever reason I was unable to this time. Instead of spending more time on figuring out Safe Mode, I tried DelFix once again in Windows and this time ... success!  Remove disinfection tools appears to have worked and here's the log. I'm not sure if Aura is still on this thread but please LMK what I should do next. 

moonshadow

# DelFix v1.013 - Logfile created 03/04/2017 at 09:05:06
# Updated 17/04/2016 by Xplode
# Username : sshiigi - DFB69GJ1
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)

~ Removing disinfection tools ...

Deleted : C:\AdwCleaner
Deleted : C:\RegBackup
Deleted : C:\ComboFix.txt
Deleted : C:\SAFEBOOT_REPAIR.TXT
Deleted : C:\Documents and Settings\sshiigi\Desktop\Addition.txt
Deleted : C:\Documents and Settings\sshiigi\Desktop\ADWCleaner (1) download.htm
Deleted : C:\Documents and Settings\sshiigi\Desktop\adwcleaner_4.202.exe
Deleted : C:\Documents and Settings\sshiigi\Desktop\ComboFix log 150430.txt
Deleted : C:\Documents and Settings\sshiigi\Desktop\ComboFix.exe
Deleted : C:\Documents and Settings\sshiigi\Desktop\Fixlog.txt
Deleted : C:\Documents and Settings\sshiigi\Desktop\FRST (2).exe
Deleted : C:\Documents and Settings\sshiigi\Desktop\FRST download.htm
Deleted : C:\Documents and Settings\sshiigi\Desktop\FRST.txt
Deleted : C:\Documents and Settings\sshiigi\Desktop\FSS.exe
Deleted : C:\Documents and Settings\sshiigi\Desktop\FSS.txt
Deleted : C:\Documents and Settings\sshiigi\Desktop\JRT.exe
Deleted : C:\Documents and Settings\sshiigi\Desktop\JRT.txt
Deleted : C:\Documents and Settings\sshiigi\Desktop\MiniToolBox.exe
Deleted : C:\Documents and Settings\sshiigi\Desktop\Result.txt
Deleted : C:\Documents and Settings\sshiigi\Desktop\SafeBootKeyRepair.exe
Deleted : C:\Documents and Settings\sshiigi\Desktop\SAFEBOOT_REPAIR log1.txt
Deleted : C:\WINDOWS\grep.exe
Deleted : C:\WINDOWS\PEV.exe
Deleted : C:\WINDOWS\NIRCMD.exe
Deleted : C:\WINDOWS\MBR.exe
Deleted : C:\WINDOWS\SED.exe
Deleted : C:\WINDOWS\SWREG.exe
Deleted : C:\WINDOWS\SWSC.exe
Deleted : C:\WINDOWS\SWXCACLS.exe
Deleted : C:\WINDOWS\Zip.exe
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

########## - EOF - ##########

Link to post
Share on other sites

Hi Aura:  

Awaiting your response. I ran DelFix Remove Disinfection Tools successfully and sent the log on 4/3, Monday.  Please advise on what I should do next.

Per above, there's still some remnants from ERUNT on my desktop.  ERUNT downloaded to my c: drive from the beginning and is still there. 

moonshadow

Link to post
Share on other sites

Sorry for the late reply, it looks like I missed your post.

I see that DelFix removed the disinfections tools properly. Now, I don't think that DelFix deletes ERUNT, since it isn't a "malware removal tool" per say. You are free to delete its folder from your C: drive. As for your Restore Points, if you want to delete them, DelFix have an option for that if you want to re-run it.

Here's how I usually instruct the users I assist to run DelFix at the end of a clean-up.

BWuhenj.pngDelFix
Follow the instructions below to download and execute DelFix.

  • Download DelFix and move the executable to your Desktop;
  • Right-click on DelFix.exe and select Spcusrh.pngRun as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users);
  • Check the following options :
    • Activate UAC;
    • Remove disinfection tools;
    • Create registry backup;
    • Purge system restore;
    • Reset system settings;
  • Once all the options mentionned above are checked, click on Run;
  • After DelFix is done running, a log will open. Please copy/paste the content of the output log in your next reply;

 

Link to post
Share on other sites

Aura:  Ran DelFix as instructed.   moonshadow

========================================

# DelFix v1.013 - Logfile created 10/04/2017 at 18:05:14
# Updated 17/04/2016 by Xplode
# Username : sshiigi - DFB69GJ1
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)

~ Removing disinfection tools ...

Deleted : C:\AdwCleaner
Deleted : C:\RegBackup

~ Creating registry backup ... OK

~ Cleaning system restore ...

Deleted : RP #624 [System Checkpoint | 01/11/2017 22:54:56]
Deleted : RP #625 [System Checkpoint | 01/12/2017 23:08:58]
Deleted : RP #626 [System Checkpoint | 01/13/2017 23:34:22]
Deleted : RP #627 [System Checkpoint | 01/15/2017 20:22:08]
Deleted : RP #628 [System Checkpoint | 01/16/2017 21:14:40]
Deleted : RP #629 [System Checkpoint | 01/18/2017 22:36:53]
Deleted : RP #630 [System Checkpoint | 01/19/2017 22:53:59]
Deleted : RP #631 [System Checkpoint | 01/21/2017 20:04:55]
Deleted : RP #632 [System Checkpoint | 01/23/2017 20:45:13]
Deleted : RP #633 [System Checkpoint | 01/24/2017 22:09:36]
Deleted : RP #634 [System Checkpoint | 01/25/2017 23:07:02]
Deleted : RP #635 [System Checkpoint | 01/27/2017 03:24:01]
Deleted : RP #636 [System Checkpoint | 01/30/2017 22:31:57]
Deleted : RP #637 [System Checkpoint | 01/31/2017 22:42:38]
Deleted : RP #638 [System Checkpoint | 02/02/2017 00:58:29]
Deleted : RP #639 [System Checkpoint | 02/06/2017 23:44:56]
Deleted : RP #640 [System Checkpoint | 02/07/2017 23:59:37]
Deleted : RP #641 [System Checkpoint | 02/09/2017 21:39:51]
Deleted : RP #642 [System Checkpoint | 02/10/2017 22:30:15]
Deleted : RP #643 [System Checkpoint | 02/13/2017 03:28:34]
Deleted : RP #644 [System Checkpoint | 02/14/2017 04:28:13]
Deleted : RP #645 [System Checkpoint | 02/15/2017 17:56:00]
Deleted : RP #646 [System Checkpoint | 02/17/2017 02:27:57]
Deleted : RP #647 [System Checkpoint | 02/20/2017 20:38:01]
Deleted : RP #648 [System Checkpoint | 02/21/2017 22:58:40]
Deleted : RP #649 [System Checkpoint | 02/22/2017 23:08:53]
Deleted : RP #650 [System Checkpoint | 02/23/2017 23:19:19]
Deleted : RP #651 [System Checkpoint | 02/24/2017 23:24:32]
Deleted : RP #652 [System Checkpoint | 02/26/2017 00:19:58]
Deleted : RP #653 [System Checkpoint | 02/27/2017 01:07:30]
Deleted : RP #654 [System Checkpoint | 02/28/2017 01:28:48]
Deleted : RP #655 [System Checkpoint | 03/01/2017 01:37:53]
Deleted : RP #656 [System Checkpoint | 03/02/2017 20:18:45]
Deleted : RP #657 [System Checkpoint | 03/03/2017 23:41:00]
Deleted : RP #658 [System Checkpoint | 03/05/2017 19:54:40]
Deleted : RP #659 [System Checkpoint | 03/06/2017 20:32:58]
Deleted : RP #660 [System Checkpoint | 03/07/2017 23:23:00]
Deleted : RP #661 [System Checkpoint | 03/09/2017 00:31:13]
Deleted : RP #662 [System Checkpoint | 03/10/2017 00:52:03]
Deleted : RP #663 [System Checkpoint | 03/13/2017 00:24:15]
Deleted : RP #664 [System Checkpoint | 03/14/2017 00:31:20]
Deleted : RP #665 [System Checkpoint | 03/15/2017 00:59:40]
Deleted : RP #666 [System Checkpoint | 03/16/2017 01:05:05]
Deleted : RP #667 [System Checkpoint | 03/17/2017 03:16:43]
Deleted : RP #668 [System Checkpoint | 03/18/2017 04:42:12]
Deleted : RP #669 [System Checkpoint | 03/20/2017 19:12:49]
Deleted : RP #670 [System Checkpoint | 03/21/2017 23:16:14]
Deleted : RP #671 [System Checkpoint | 03/22/2017 23:54:22]
Deleted : RP #672 [System Checkpoint | 03/24/2017 01:43:03]
Deleted : RP #673 [System Checkpoint | 03/26/2017 20:20:17]
Deleted : RP #674 [System Checkpoint | 03/27/2017 23:29:01]
Deleted : RP #675 [System Checkpoint | 03/29/2017 19:01:54]
Deleted : RP #676 [System Checkpoint | 03/31/2017 04:27:00]
Deleted : RP #677 [System Checkpoint | 04/02/2017 01:17:05]
Deleted : RP #678 [System Checkpoint | 04/03/2017 22:38:41]
Deleted : RP #679 [System Checkpoint | 04/05/2017 00:21:51]
Deleted : RP #680 [System Checkpoint | 04/06/2017 05:28:08]
Deleted : RP #681 [System Checkpoint | 04/07/2017 05:59:14]
Deleted : RP #682 [System Checkpoint | 04/08/2017 19:21:22]
Deleted : RP #683 [Installed TurboTax 2015 wrapper | 04/09/2017 20:11:47]
Deleted : RP #684 [System Checkpoint | 04/10/2017 20:37:13]

New restore point created !

~ Resetting system settings ... OK

########## - EOF - ##########

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.