Jump to content

ESET remnants.


Recommended Posts

After uninstalling ESET av with removal tool  from system I still see lots of remnants. 

From WSCR  log:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
    cval                                     [REG_DWORD]    : 1 (0X1)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Feature]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av]
    DataMigrated                             [REG_DWORD]    : 1 (0X1)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{89B55CC4-3881-78B2-11E2-479AE0371896}]
    GUID                                     [REG_SZ]       : {89B55CC4-3881-78B2-11E2-479AE0371896}
    DISPLAYNAME                              [REG_SZ]       : ESET Security
    STATE                                    [REG_DWORD]    : 266240 (0X41000)
    PRODUCTEXE                               [REG_SZ]       : C:\Program Files\ESET\ESET Security\ecmds.exe
    REPORTINGEXE                             [REG_SZ]       : C:\Program Files\ESET\ESET Security\ekrn.exe

WSCInfo log

*********************************** WSC State Info *************************
*********************************** AntiVirusProduct *************************
displayName = [ESET Security]
pathToSignedProductExe = [C:\Program Files\ESET\ESET Security\ecmds.exe]
productState = [266240]
displayName = [Windows Defender]
pathToSignedProductExe = [windowsdefender://]
productState = [393472]
displayName = [ESET Endpoint Antivirus]
pathToSignedProductExe = [C:\Program Files\ESET\ESET Security\ecmd.exe]
productState = [266240]
*********************************** AntiSpywareProduct *************************
displayName = [ESET Security]
pathToSignedProductExe = [C:\Program Files\ESET\ESET Security\ecmds.exe]
productState = [266240]
displayName = [Windows Defender]
pathToSignedProductExe = [windowsdefender://]
productState = [393472]
displayName = [ESET Endpoint Antivirus]
pathToSignedProductExe = [C:\Program Files\ESET\ESET Security\ecmd.exe]
productState = [266240]
*********************************** IWscProduct(WSC_SECURITY_PROVIDER_ANTIVIRUS) *************************
Product #1 of 2
  Name:      ESET Security
  ExePath:   C:\Program Files\ESET\ESET Security\ecmds.exe
  State:     0
  SigStatus: 1
  Substatus:
    Scan:        1
    Settings:    1
    Updates:     1

Question. 

How to remove all this remnants ? 

 

Link to comment
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...