Status
Not open for further replies.
1 - 20 of 26 Posts

#### Evalyn

·
##### Registered
Joined
·
12 Posts
Discussion Starter · ·
Have uninstalled Nortons Symantec Antivirus but now everytime I right click in any program the Antivirus attempts to reinstall itself. How can I fix this

·
Joined
·
11,253 Posts

#### Evalyn

·
##### Registered
Joined
·
12 Posts
Discussion Starter · ·
I ran the Nortons removal tool to uninstall the program in the first place but when I try to remove it from Add/Remove it wants a password which I can't remember. Any other Suggestions?

Thanks for responding so quickly Theshooter93

·
Joined
·
11,253 Posts

#### Evalyn

·
##### Registered
Joined
·
12 Posts
Discussion Starter · ·
Hi The Shooter 93

I tried using your link to Revo uninstaller but I no longer have the help of my computer literate brother-in-law who lives in a different state. The message that came up was "Your download will start soon" then a new page that gave me a lot of product options from Cnet but there doesnt seem to be any way of continuing the download process.

I am an "old" beginner which is what got me in trouble in the first place. I had accidently installed Imesh and Alot which has made my computer run at a snails pace. My brother-in-law thinks he's cleaned them up but I am back home now and so I have to try "fly solo". These two programs seem to be gone (fingers crossed) but the running is only moderately improved

I got my computer second hand from a friend with Symantec Antivirus already installed. It kept coming up with a bubble message saying it was inactive which Alan said was one of the things slowing down my computer as it was trying to load. That was why he started to remove it but going through the usual add/remove program required the key that I don't have. My friend who gave me the computer has moved to Bruni so....no key!

I am now really wary of downloading ANYTHING on my own so with Revo not making it simple I'm not sure what to do

Thanks for your patience. I am trying to move out of the stone age but us old girls come from the pre digital tech era so it's so much harder for us to pick this stuff up.

Cheers
Evalyn

#### TheShooter93

·
##### Registered
Joined
·
11,253 Posts
Symantec running will definitely slow the computer down, though I find it odd it's requiring that key.

Do you happen to have a Recovery CD or Windows XP CD?

--------------------------------------------------

Now about Revo Uninstaller, you should just be able to click "Download Now". Then when it gets to the page that says "your download will start soon", wait for a download box to appear. If it does not, look at the top of Internet Explorer for a gold bar mentioning the blocking of a pop-up. This may be the reason the download box does not appear.

#### Evalyn

·
##### Registered
Joined
·
12 Posts
Discussion Starter · ·
Thanks Shooter93

I managed to install Revo Uninstaller and successfully went through the process to uninstall Symantec Antivirus but my initial problem remains.

When I right click in any program an Install Shield Wizard begins to reinstall Symantec Antivirus.

While I was uninstalling with Revo the Symantec uninstall wizard came up again and when I went through its process it stopped me by requesting the password. So I cancelled it and continued the uninstall process with Revo.

According to Revo I'm done but this Wizard still doggedly remains and wont let me use my right click.
The good news is my computer is behaving better. Is there a way of dumping this wizard or do I just have to put up with. I can still use right click actions after I've stopped the wizard's installation process. It's just very annoying and I have to be on my guard to hit cancel quickly as the installation is fast.

Evalyn

#### TheShooter93

·
##### Registered
Joined
·
11,253 Posts
Try going to C:\Program Files\Norton and deleting it.

----------------------------------------------

Click the Processes Tab.

See is Symantec/Norton is currently running.

----------------------------------------------

If the software is uninstalled to the degree that you do not have antivirus protection, I suggest downloading Microsoft Security Essentials.

#### Evalyn

·
##### Registered
Joined
·
12 Posts
Discussion Starter · ·
Hi again The Shooter93

This is really strange. Norton or Symantec doesn't appear anywhere on my computer nor is it running in the taskbar. I looked under C:\Program Files\Norton and did a search for it all over the computer, then tried a search under Norton Install Shield Wizard.

Did find a folder inside Program File folder called Instal Shield Installation Information and inside this there were a number of folders with long numerical/alphabetical names but none of these had any references to Norton or Symantec. They each had an icon named Setup Install Shield (R) Setup Launcher, then a file version and some had Macrovision in the name

One thing I noticed is that when I try right clicking, the first little box that comes up has Windows Installer on the top then it changes to Symantec Antivirus Shield Wizard.

The other thing that might have something to do with it is that this computer is an ex-education departmant unit and still has 4 servers installed. Would they be trying to load as well? Would it help if I dump these and if yes how do I do it?
They are labelled in My Computer as:

students$on 'hpsserver' (R staff$ on 'hpsserver' (V
Group on 'hpsserver' (Y
CDs on 'hpsserver' (S

Thanks again The Shooter93.
Evalyn

PS: My son installed AVG for me prior to Xmas so I have Virus protection. I also have spybot

#### TheShooter93

·
##### Registered
Joined
·
11,253 Posts
If there is no Program Folder for Norton or Symantec, yet you're still able to uninstall it using Revo Uninstaller, then it is obviously partly still on your system.

Since you can't uninstall the program without entering a key of some sort, I suggest installing a fresh OS.

Normally, I wouldn't suggest this since it's a bit extreme for a problem like this, but I'm all out of ideas at the moment. I will ask around and see if anyone has other ideas for you.

Do you have a System Recovery CD or a Windows XP CD?

----------------------------------------------

Also, did you try installing Microsoft Security Essentials?

#### Phantom010

·
Joined
·
34,806 Posts

Run it and select Do a system scan and save a logfile from the Main Menu.

IMPORTANT: Do not fix anything

#### Phantom010

·
Joined
·
34,806 Posts
If you can't run HijackThis in Normal Mode, reboot the computer into Safe Mode and run the program again.

#### TheShooter93

·
##### Registered
Joined
·
11,253 Posts
Phantom010 is a Trusted Advisor with a lot more knowledge and experience than I have. He'll be able to help you out from here, good luck.

(I will be keeping tabs on this thread, just in case I come up with another idea or something along those lines).

#### Evalyn

·
##### Registered
Joined
·
12 Posts
Discussion Starter · ·
Thanks for trying to help me The Shooter93. If nothing else, I've learnt heaps from you. Phantom 010 has offered to help so maybe we will get to the bottom of this.

Good luck with your future plans.
Evalyn

#### Evalyn

·
##### Registered
Joined
·
12 Posts
Discussion Starter · ·
Hi Pantom 010

Thanks for wading into the fray

Here is the log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:55:57 AM, on 9/01/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\System32\QCONSVC.EXE
C:\WINDOWS\System32\TPHDEXLG.EXE
C:\WINDOWS\system32\TpKmpSVC.exe
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\TpShocks.exe
C:\WINDOWS\system32\TpScrLk.exe
C:\IBMTOOLS\UTILS\ibmprc.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\PROGRA~1\AVG\AVG10\avgrsx.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
O2 - BHO: ALOT Toolbar BHO - {14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6} - C:\Program Files\alot\bin\alot.dll (file missing)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll
O2 - BHO: UrlHelper Class - {474597C5-AB09-49d6-A4D5-2E8D7341384E} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll (file missing)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [TPKBDLED] C:\WINDOWS\system32\TpScrLk.exe
O4 - HKLM\..\Run: [IBMPRC] C:\IBMTOOLS\UTILS\ibmprc.exe
O4 - HKLM\..\Run: [QCTRAY] C:\Program Files\ThinkPad\ConnectUtilities\QCTRAY.EXE
O4 - HKLM\..\Run: [QCWLICON] C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
O4 - HKLM\..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper
O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1236127832226
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll
O20 - AppInit_DLLs:
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe
O23 - Service: IBM Rapid Restore Ultra Service - Unknown owner - C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: Sony SPTI Service for DVE (ICDSPTSV) - Sony Corporation - C:\WINDOWS\system32\IcdSptSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - C:\WINDOWS\system32\PsaSrv.exe (file missing)
O23 - Service: QCONSVC - IBM Corp. - C:\WINDOWS\System32\QCONSVC.EXE
O23 - Service: SAVRoam (SavRoam) - Unknown owner - C:\Program Files\Symantec AntiVirus\SavRoam.exe (file missing)
O23 - Service: IBM HDD APS Logging Service (TPHDEXLGSVC) - IBM Corporation - C:\WINDOWS\System32\TPHDEXLG.EXE
O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINDOWS\system32\TpKmpSVC.exe
--
End of file - 8447 bytes

#### TheShooter93

·
##### Registered
Joined
·
11,253 Posts
You're welcome, glad to know I was able to spread what knowledge I have.

I've worked with Phantom010 for a little while now, and I'm more than confident in his ability to help you solve this. Just follow his instructions and you'll be good to go in no time.

Also, thanks for the well wishes. I'll need all the luck I can get in college.

#### Phantom010

·
Joined
·
34,806 Posts
You still have leftovers from Norton/Symantec in there. They should definitely be removed or they'll eventually cause more problems, especially with your Internet connection.

Try running the Norton Removal Tool again, this time after booting into Safe Mode.

#### Evalyn

·
##### Registered
Joined
·
12 Posts
Discussion Starter · ·
Hi again Phantom 010

I tried running Norton removal tool in safe mode but the Install shield wizard still ran when I tried to right click. Then I thought since I dont know what year the Symantec Antivirus was originally installed maybe I went too far back, so I installed the removal tool again for 2006 + but that didn't work either.

I'm stumped - I hope you aren't????? Would really like to see an end to this saga

Thanks
Evalyn

#### Phantom010

·
Joined
·
34,806 Posts
I don't quite understand how you ran the Norton Removal Tool. It's a pretty straight forward procedure.

===================================================================

Click Start > Run > type CMD

In the command prompt window, type: sc delete SavRoam

Press Enter.

Type: sc delete PsaSrv

Press Enter.

Reboot the computer.

===================================================================

If no luck,

Check out the following video on how to run the tool:

===================================================================

If that fails again, you can try reinstalling your Norton products and then using the Norton Removal Tool. However, before doing so, I recommend removing AVG with the AVG Remover to avoid any conflicts.

#### TerryNet

·
##### Super Moderator
Joined
·
82,234 Posts
Sounds like you have a corporate version of Symantec's security suite, although maybe personal versions have password protection. We don't help with passwords, so if you cannot get it legitimately your only real choice is to install or "Recover" the operating system.

1 - 20 of 26 Posts
Status
Not open for further replies.