cannot uninstall the ESET folder

[okami 0]

i am running under windows 8.1 pro 64bit.

i am the sole user of this computer and have ALL rights.

 

i wanted to try their smart security program but in the end i wanted to uninstall it.

now i can not delete it. it tells me "access is denied".

i have looked through the ownership parts and i have in all cases "full control".

 

i have uninstalled it using eset's uninstall tool where you have to run it in save mode ect...(even running in save mode in windows 8.1 is a drag..)

 

NO folder should be this hard to uninstall! ever!

if this does not get resolved i will never recommend it to anyone ever again. i never had the program but knew it was a good one doesn't take that much resources but if i need to get to a forum asking help to delete the folder then yeah.... 

 

if somebody has any better ideas they are more then welcome.

[Arakasi 549]

Good day,

 

The reason you cannot delete the folder is because there are drivers contained therein that are tied to running services etc.

You could try checking to see if you still have any ESET services in Administrative Tools > Services.

Stop them, then try your delete.

 

However, manually deleting a folder is not the correct practice for removing programs, simply because deleting the folder does not remove the services or the registry entries; not to mention files in appdata etc.

 

I would then have to ask, did you have any errors in safemode when running the uninstaller tool ? Did it not say complete and reboot after ?

I would run the uninstaller tool one more time and take note of any errors or issues along the way.

Edited May 6, 2014 by Arakasi

[Marcos 4,908]

I'd suggest running the uninstall tool twice or even more times unless it reports that no security program has been detected. It seems that the HIPS driver is still loaded and protecting the ESET install folder.

 

PS: We would appreciate if you could share with us the reasons that led you to uninstalling ESET

[Arakasi 549]

HIPS self-defense doing its job.

Sorry Okami for your removal issues.

What steps did you take to remove in the very beginning ? Programs and Features ?

[okami 0]

i have looked for servisec related to eset but did not find any.

 

as for the un-installment, i went to it like always, having windows delete it for me in the install/uninstall section.

 

then i saw the folder was still there containing data so i wanted to delete them then i stumbeled upon your security. so i looked on the internet and saw i needed your uninstallatin tool.

 

so i executed it once in safe mode with it finishing succesfully.

 

but it's still here. so i will try to run it again a few times and see what happend.

 

the reason i wanted to uninstall it is kinda complicated, i have this error screen poping up in the beginning sins i installed eset.

this one:  hxxp://fud.community.services.support.microsoft.com/Fud/FileDownloadHandler.ashx?fid=a94be38d-691b-446d-a078-43d796492c85 

and i have seen how to delete it but i do not have access to delete a certain regedit file and i am trying to see if eset is the cause of it.

[Arakasi 549]

Hi,

Chances are, that picture you posted, is a threat using explorer to run by way of launch and ESET possibly terminated the threat.

So now the malicious file can't run but returns an error instead.

 

This is not necessarily the case, but what i have seen in the past experiences.

[okami 0]

i see, but that means that if i manage to delete the eset folder, it will no longer be blocked and i will be able to delete it.

 

as for the uninstall tool, i ran it multiple times every time saying uninstall succesfull....

but it's still there.. and i still can't delete it.

 

any other ideas?

[Arakasi 549]

Yes we will continue to assist.

 

Can you give us a screen shot of the directory you are trying to delete, or type the full path here.

[okami 0]

this is the one i am trying to delete.

however it says : unable to delete all specific values.

 

image: https://imagizer.imageshack.us/v2/1697x955q90/841/bjxb.png

[Arakasi 549]

Thanks for providing that.

I was able to delete any REG_SZ string value in that section on my own registry without issues.

I'm afraid ESET might not be the cause of your unable to delete that particular string value.'

 

Having that key there is not default and definitely signs of infection or alteration.

 

Also, i was referring to which folder of ESET that you could not delete.

[okami 0]

i see. have any ideas about how to resolve it? sins that is basicaly the reason i uninstalled eset....

 

this is the folder C:\ProgramData\ESET

[Marcos 4,908]

ESET doesn't use nor protect the registry key shown in the screen shot unless you create a blocking HIPS rule manually. I'd say this is not related to ESET at all.

[okami 0]

i see, well i was just trying to see if eset caused it sins i got it the same day as i installed eset. that is all. i wasn't sure about it at all.

even so, deleting a folder should not be this difficult.

[okami 0]

i just did the uninstall tool one less time because well, desperate. it finally worked even though i did not change anything....

well, that is resolved, just gotta do it 10 times or so....

 

any way, if anyone could help with my annoying popup at start up i would be most grateful.

[Marcos 4,908]

Sometimes it's necessary to run the uninstall tool more times until no AV program is detected.

What pop-up are you getting now that ESET has been uninstalled completely?

[okami 0]

still the same as the one from the day i installed eset. 

hxxp://fud.community.services.support.microsoft.com/Fud/FileDownloadHandler.ashx?fid=a94be38d-691b-446d-a078-43d796492c85

[Marcos 4,908]

still the same as the one from the day i installed eset. 

hxxp://fud.community.services.support.microsoft.com/Fud/FileDownloadHandler.ashx?fid=a94be38d-691b-446d-a078-43d796492c85

 

This pop-up window doesn't come from nor is caused by ESET. Does it pop up right after your start Windows? Perhaps an ESET SysInspector log would shed more light. Please create one and supply it to me via a personal message for perusal.

[Arakasi 549]

This key here he provided:  https://imagizer.imageshack.us/v2/1697x955q90/841/bjxb.png Could be his problem, does not belong, and he is having issues deleting it.

 

Have you tried taking ownership of the key ?

[Wrogg 5]

There is something very wrong with the standard un-install method on Windows 8.1 update 1. The first time I removed it from desktop, I had to reinstall windows due to sata controller errors filling up event viewer and system freezes, I thought my motherboard was dying, I have had no similar errors since.

When I removed it from my laptop msiExec.exe stopped working, I managed to salvage that with the removal tool.

Both were removed from control panel.

Both were clean Windows installs with no other security software.

I am scared to try again.

May try the next build if it fixes the various other issues I was experiencing. 

[okami 0]

i have no time for the moment, will try these thinks out within a few hours and see what gives.

[okami 0]

@marcos i have the log from your software sent to you in a personal message.

 

@Arakasi, i have tried to take ownership but everytime  i try to it tells me i "access denied" as if there is another member that has taken all my rights.

Edited May 7, 2014 by okami

[Wrogg 5]

If its just a remaining folder. This usually works for me hxxp://www.filehippo.com/download_unlocker/

[Arakasi 549]

If its just a remaining folder. This usually works for me hxxp://www.filehippo.com/download_unlocker/

 

Registry key

[okami 0]

@wrogg, thanks for trying any way.

i am looking with someone else now as well, if this person can't do it i give up.

[Arakasi 549]

If there is a process or service in use, you will receive the access denied everytime.

You could try docking the drive and deleting the key with a different computer and registry editor then turning the computer back on after moving the hive.

 

This may then reveal an error on startup when the malicious content tries to load.