Jump to content


Photo
- - - - -

"Maniac" resume help please


  • This topic is locked This topic is locked
48 replies to this topic

#41 imposs

imposs

    New Member

  • Members
  • Pip
  • 29 posts

Posted 02 January 2013 - 01:24 PM

Happy New Year! I hope you had a good holiday. What do you mean when you say I should reinstalled ZoneAlarm and uninstall it "the right way"? Do you mean that I should uninstall it through my Control Panel because, if so, surely this will leave the same extra bits that I have already which were left last time I did it? Alternatively do you think I should use a special tool to uninstall it? Please let me know what you have in mind.

#42 Maniac

Maniac

    Forum Deity

  • Experts
  • PipPipPipPipPipPip
  • 21,392 posts
  • Gender:Male
  • Location:Bulgaria, EU

Posted 02 January 2013 - 06:02 PM

Yes, my idea is to uninstall it via Control Panel. Then to restart your system. After the reboot, please download and run this tool:
http://download.zone...nload/clean.exe

After the cleaning, reboot the system again. Finally, everything should be clean.

Don't forget that whatever you do, I couldn't clean everything for you. Most importantly, I can't find everything. If you have problems with this product, you should contact their support team.
My help is free, however, if you wish to make a small donation to show appreciation and to help me continue the fight against Malware, then click here paypal.gif

#43 imposs

imposs

    New Member

  • Members
  • Pip
  • 29 posts

Posted 04 January 2013 - 06:15 PM

As I am trying to get rid of all parts of ZoneAlarm, I do not understand the logic of your suggestion that I should reinstall it. However I have full trust in your judgment and I have done what you said. I reinstalled its firewall and toolbar and I uninstalled them through the Control Panel. I then ran the cleaning tool which you suggested. I am now back at the same situation as I was before with significant ZoneAlarm entries showing up in SystemLook.
Could I ask you to write me just one more piece of special text to try to get rid of as much of what is left as possible. I show below the latest SystemLook log.


SystemLook 30.07.11 by jpshortstuff
Log created at 18:41 on 04/01/2013 by MPOSSENER
Administrator - Elevation successful
========== filefind ==========
Searching for "*zonealarm*"
C:\Users\MPOSSENER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RE42D1LX\121029.ZoneAlarm-Facebook-Wild-Child1[1].png --a---- 1444419 bytes [21:49 03/01/2013] [21:49 03/01/2013] 0E109D16119ECBFF2196687748C4CF79
C:\Users\MPOSSENER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RE42D1LX\121220.ZoneAlarm-Lost-Personal-Devices1[1].png --a---- 397658 bytes [21:49 03/01/2013] [21:49 03/01/2013] 9A8EA22435FC4F7A7781C7D2BC62CB2C
C:\Users\MPOSSENER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RE42D1LX\121221.ZoneAlarm-Facebook-Gifts[1].png --a---- 234688 bytes [21:49 03/01/2013] [21:49 03/01/2013] 97097519E3BE76DB3CB6660BD03B46A0
C:\Users\MPOSSENER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV1GJUWR\search_zonealarm_com[1].htm --a---- 9436 bytes [23:17 03/01/2013] [23:17 03/01/2013] 37430B7967410073A16BFB897110B1AF
C:\Users\MPOSSENER\AppData\Local\Temp\{907A1104-E812-4b5c-959B-E4DAB37A96AB}\ZoneAlarm.log --a---- 278492 bytes [21:46 03/01/2013] [21:46 03/01/2013] 3F082BAC3FBB8F4EA44113E828EC355B
C:\Users\MPOSSENER\AppData\Roaming\Microsoft\Office\Recent\remove ZoneAlarm.LNK --a---- 1102 bytes [23:54 24/12/2012] [23:56 03/01/2013] 3E5CCBD7B86074889A9454BC11B6028E
C:\Users\MPOSSENER\AppData\Roaming\Microsoft\Windows\Recent\remove ZoneAlarm.lnk --a---- 2593 bytes [23:54 24/12/2012] [23:56 03/01/2013] FB6F9A96856DF0BFB17DD6C43EF95743
C:\Users\MPOSSENER\Documents\remove ZoneAlarm.doc --a---- 28160 bytes [00:18 03/12/2012] [20:40 26/12/2012] B612838A00397F43103B29810FC99E62
Searching for "*checkpoint*"
No files found.
========== folderfind ==========
Searching for "*zonealarm*"
C:\Users\MPOSSENER\AppData\Local\Temp\mt_ffx\Check Point Software Technologies LTD\zonealarm d------ [21:25 03/01/2013]
C:\Users\MPOSSENER\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar d------ [21:46 03/01/2013]
Searching for "*checkpoint*"
C:\ProgramData\CheckPoint d------ [21:22 03/01/2013]
C:\Users\All Users\CheckPoint d------ [21:22 03/01/2013]
C:\Users\MPOSSENER\AppData\Roaming\CheckPoint d------ [21:46 03/01/2013]
C:\_OTL\MovedFiles\12192012_104913\C_Program Files (x86)\CheckPoint d------ [19:52 31/07/2012]
========== regfind ==========
Searching for "zonealarm"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5F05AA7F-234C-4481-AC7B-767B4FDCB12B}]
"DisplayName"="Search By ZoneAlarm"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5F05AA7F-234C-4481-AC7B-767B4FDCB12B}]
"URL"="http://search.zoneal...rchTerms}&r=716"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5F05AA7F-234C-4481-AC7B-767B4FDCB12B}]
"OSDFileURL"="file:///C:/Users/MPOSSE~1/AppData/Local/Temp/Check%20Point%20Software%20Technologies%20LTD/zonealarm/1.6.7.4/zonealarm.xml"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5F05AA7F-234C-4481-AC7B-767B4FDCB12B}]
"FaviconURL"="http://search.zoneal...com/favicon.ico"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs]
"url4"="http://www.zonealarm.com/"
[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU]
"Item 1"="[F00000000][T01CDEA0E04E439C0][O00000000]*C:\Users\MPOSSENER\Documents\remove ZoneAlarm.doc"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\CheckPoint\ZoneAlarm\Logs\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\Help\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\zonealarm_base_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\zonealarm_base_RASMANCS]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@checkpoint.com/FFApi]
"Description"="ZoneAlarm LTD Toolbar Api"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@checkpoint.com/FFApi]
"Product"="ZoneAlarm LTD Toolbar"
[HKEY_USERS\S-1-5-21-1995658937-3148030641-3140236263-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5F05AA7F-234C-4481-AC7B-767B4FDCB12B}]
"DisplayName"="Search By ZoneAlarm"
[HKEY_USERS\S-1-5-21-1995658937-3148030641-3140236263-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5F05AA7F-234C-4481-AC7B-767B4FDCB12B}]
"URL"="http://search.zoneal...rchTerms}&r=716"
[HKEY_USERS\S-1-5-21-1995658937-3148030641-3140236263-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5F05AA7F-234C-4481-AC7B-767B4FDCB12B}]
"OSDFileURL"="file:///C:/Users/MPOSSE~1/AppData/Local/Temp/Check%20Point%20Software%20Technologies%20LTD/zonealarm/1.6.7.4/zonealarm.xml"
[HKEY_USERS\S-1-5-21-1995658937-3148030641-3140236263-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5F05AA7F-234C-4481-AC7B-767B4FDCB12B}]
"FaviconURL"="http://search.zoneal...com/favicon.ico"
[HKEY_USERS\S-1-5-21-1995658937-3148030641-3140236263-1000\Software\Microsoft\Internet Explorer\TypedURLs]
"url4"="http://www.zonealarm.com/"
[HKEY_USERS\S-1-5-21-1995658937-3148030641-3140236263-1000\Software\Microsoft\Office\14.0\Word\File MRU]
"Item 1"="[F00000000][T01CDEA0E04E439C0][O00000000]*C:\Users\MPOSSENER\Documents\remove ZoneAlarm.doc"
Searching for "checkpoint"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs]
"url22"="http://users/All%20Users/CheckPoint"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs]
"url23"="http://users/AllUsers/CheckPoint"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU]
"h"="C:\ProgramData\CheckPoint\1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\CheckPoint\ZoneAlarm\Logs\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\Help\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009]
"Counter"="1 1847 2 System 4 Memory 6 % Processor Time 10 File Read Operations/sec 12 File Write Operations/sec 14 File Control Operations/sec 16 File Read Bytes/sec 18 File Write Bytes/sec 20 File Control Bytes/sec 24 Available Bytes 26 Committed Bytes 28 Page Faults/sec 30 Commit Limit 32 Write Copies/sec 34 Transition Faults/sec 36 Cache Faults/sec 38 Demand Zero Faults/sec 40 Pages/sec 42 Page Reads/sec 44 Processor Queue Length 46 Thread State 48 Pages Output/sec 50 Page Writes/sec 52 Browser 54 Announcements Server/sec 56 Pool Paged Bytes 58 Pool Nonpaged Bytes 60 Pool Paged Allocs 64 Pool Nonpaged Allocs 66 Pool Paged Resident Bytes 68 System Code Total Bytes 70 System Code Resident Bytes 72 System Driver Total Bytes 74 System Driver Resident Bytes 76 System Cache Resident Bytes 78 Announcements Domain/sec 80 Election Packets/sec 82 Mailslot Writes/sec 84 Server List Requests/sec 86 Cache 88 Data Maps/sec 90 Sync Data Maps/s
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009]
"Help"="3 The System performance object consists of counters that apply to more than one instance of a component processors on the computer. 5 The Memory performance object consists of counters that describe the behavior of physical and virtual memory on the computer. Physical memory is the amount of random access memory on the computer. Virtual memory consists of the space in physical memory and on disk. Many of the memory counters monitor paging, which is the movement of pages of code and data between disk and physical memory. Excessive paging, a symptom of a memory shortage, can cause delays which interfere with all system processes. 7 % Processor Time is the percentage of elapsed time that the processor spends to execute a non-Idle thread. It is calculated by measuring the percentage of time that the processor spends executing the idle thread and then subtracting that value from 100%. (Each processor has an idle thread tha
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\CurrentLanguage]
"Counter"="1 1847 2 System 4 Memory 6 % Processor Time 10 File Read Operations/sec 12 File Write Operations/sec 14 File Control Operations/sec 16 File Read Bytes/sec 18 File Write Bytes/sec 20 File Control Bytes/sec 24 Available Bytes 26 Committed Bytes 28 Page Faults/sec 30 Commit Limit 32 Write Copies/sec 34 Transition Faults/sec 36 Cache Faults/sec 38 Demand Zero Faults/sec 40 Pages/sec 42 Page Reads/sec 44 Processor Queue Length 46 Thread State 48 Pages Output/sec 50 Page Writes/sec 52 Browser 54 Announcements Server/sec 56 Pool Paged Bytes 58 Pool Nonpaged Bytes 60 Pool Paged Allocs 64 Pool Nonpaged Allocs 66 Pool Paged Resident Bytes 68 System Code Total Bytes 70 System Code Resident Bytes 72 System Driver Total Bytes 74 System Driver Resident Bytes 76 System Cache Resident Bytes 78 Announcements Domain/sec 80 Election Packets/sec 82 Mailslot Writes/sec 84 Server List Requests/sec 86 Cache 88 Data Maps/sec 90 Sync
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\CurrentLanguage]
"Help"="3 The System performance object consists of counters that apply to more than one instance of a component processors on the computer. 5 The Memory performance object consists of counters that describe the behavior of physical and virtual memory on the computer. Physical memory is the amount of random access memory on the computer. Virtual memory consists of the space in physical memory and on disk. Many of the memory counters monitor paging, which is the movement of pages of code and data between disk and physical memory. Excessive paging, a symptom of a memory shortage, can cause delays which interfere with all system processes. 7 % Processor Time is the percentage of elapsed time that the processor spends to execute a non-Idle thread. It is calculated by measuring the percentage of time that the processor spends executing the idle thread and then subtracting that value from 100%. (Each processor has an idl
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex]
"CheckPointSignature"="32bf89d3-705a-434d-a963-7c7a31043efc"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Perflib\009]
"Counter"="1 1847 2 System 4 Memory 6 % Processor Time 10 File Read Operations/sec 12 File Write Operations/sec 14 File Control Operations/sec 16 File Read Bytes/sec 18 File Write Bytes/sec 20 File Control Bytes/sec 24 Available Bytes 26 Committed Bytes 28 Page Faults/sec 30 Commit Limit 32 Write Copies/sec 34 Transition Faults/sec 36 Cache Faults/sec 38 Demand Zero Faults/sec 40 Pages/sec 42 Page Reads/sec 44 Processor Queue Length 46 Thread State 48 Pages Output/sec 50 Page Writes/sec 52 Browser 54 Announcements Server/sec 56 Pool Paged Bytes 58 Pool Nonpaged Bytes 60 Pool Paged Allocs 64 Pool Nonpaged Allocs 66 Pool Paged Resident Bytes 68 System Code Total Bytes 70 System Code Resident Bytes 72 System Driver Total Bytes 74 System Driver Resident Bytes 76 System Cache Resident Bytes 78 Announcements Domain/sec 80 Election Packets/sec 82 Mailslot Writes/sec 84 Server List Requests/sec 86 Cache 88 Data Maps/sec 90 Sync
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Perflib\009]
"Help"="3 The System performance object consists of counters that apply to more than one instance of a component processors on the computer. 5 The Memory performance object consists of counters that describe the behavior of physical and virtual memory on the computer. Physical memory is the amount of random access memory on the computer. Virtual memory consists of the space in physical memory and on disk. Many of the memory counters monitor paging, which is the movement of pages of code and data between disk and physical memory. Excessive paging, a symptom of a memory shortage, can cause delays which interfere with all system processes. 7 % Processor Time is the percentage of elapsed time that the processor spends to execute a non-Idle thread. It is calculated by measuring the percentage of time that the processor spends executing the idle thread and then subtracting that value from 100%. (Each processor has an idl
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Perflib\CurrentLanguage]
"Counter"="1 1847 2 System 4 Memory 6 % Processor Time 10 File Read Operations/sec 12 File Write Operations/sec 14 File Control Operations/sec 16 File Read Bytes/sec 18 File Write Bytes/sec 20 File Control Bytes/sec 24 Available Bytes 26 Committed Bytes 28 Page Faults/sec 30 Commit Limit 32 Write Copies/sec 34 Transition Faults/sec 36 Cache Faults/sec 38 Demand Zero Faults/sec 40 Pages/sec 42 Page Reads/sec 44 Processor Queue Length 46 Thread State 48 Pages Output/sec 50 Page Writes/sec 52 Browser 54 Announcements Server/sec 56 Pool Paged Bytes 58 Pool Nonpaged Bytes 60 Pool Paged Allocs 64 Pool Nonpaged Allocs 66 Pool Paged Resident Bytes 68 System Code Total Bytes 70 System Code Resident Bytes 72 System Driver Total Bytes 74 System Driver Resident Bytes 76 System Cache Resident Bytes 78 Announcements Domain/sec 80 Election Packets/sec 82 Mailslot Writes/sec 84 Server List Requests/sec 86 Cache 88 Data Maps
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Perflib\CurrentLanguage]
"Help"="3 The System performance object consists of counters that apply to more than one instance of a component processors on the computer. 5 The Memory performance object consists of counters that describe the behavior of physical and virtual memory on the computer. Physical memory is the amount of random access memory on the computer. Virtual memory consists of the space in physical memory and on disk. Many of the memory counters monitor paging, which is the movement of pages of code and data between disk and physical memory. Excessive paging, a symptom of a memory shortage, can cause delays which interfere with all system processes. 7 % Processor Time is the percentage of elapsed time that the processor spends to execute a non-Idle thread. It is calculated by measuring the percentage of time that the processor spends executing the idle thread and then subtracting that value from 100%. (Each processo
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions]
"{FFB96CC1-7EB3-449D-B827-DB661701C6BB}"="C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@checkpoint.com/FFApi]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@checkpoint.com/FFApi]
"Path"="C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll"
[HKEY_USERS\S-1-5-21-1995658937-3148030641-3140236263-1000\Software\Microsoft\Internet Explorer\TypedURLs]
"url22"="http://users/All%20Users/CheckPoint"
[HKEY_USERS\S-1-5-21-1995658937-3148030641-3140236263-1000\Software\Microsoft\Internet Explorer\TypedURLs]
"url23"="http://users/AllUsers/CheckPoint"
[HKEY_USERS\S-1-5-21-1995658937-3148030641-3140236263-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU]
"h"="C:\ProgramData\CheckPoint\1"
-= EOF =-

#44 Maniac

Maniac

    Forum Deity

  • Experts
  • PipPipPipPipPipPip
  • 21,392 posts
  • Gender:Male
  • Location:Bulgaria, EU

Posted 04 January 2013 - 06:25 PM

The thing is that if hypothetically there was a problem with the uninstaller and then uninstaller missed some files and folders, then with a re-implementation process they will be cleaned.

My suggestion is to contact ZoneAlarm Support team:
http://www.zonealarm...ce-support.htm#

Give them the link from this thread and explain that we already uninstall their program. Then we used their cleaner for leftovers and still have some leftovers from the program.
My help is free, however, if you wish to make a small donation to show appreciation and to help me continue the fight against Malware, then click here paypal.gif

#45 imposs

imposs

    New Member

  • Members
  • Pip
  • 29 posts

Posted 08 January 2013 - 03:50 PM

I suspect that the ZoneAlarm Support team will not be very interested in helping me to uninstall their product! The question really is does it matter if there are some leftovers from their program? Can I just leave them on my computer and forget them or will they cause trouble?

#46 Maniac

Maniac

    Forum Deity

  • Experts
  • PipPipPipPipPipPip
  • 21,392 posts
  • Gender:Male
  • Location:Bulgaria, EU

Posted 09 January 2013 - 09:11 AM

Every signle installed program left some leftovers. One of them more, another less, but there is no chance to not leave any leftovers.

There is no problem to proceed with these.
My help is free, however, if you wish to make a small donation to show appreciation and to help me continue the fight against Malware, then click here paypal.gif

#47 imposs

imposs

    New Member

  • Members
  • Pip
  • 29 posts

Posted 12 January 2013 - 03:33 PM

OK. I shall leave it there and let you know if there are any problems. Thank you very much for your help again.

#48 Maniac

Maniac

    Forum Deity

  • Experts
  • PipPipPipPipPipPip
  • 21,392 posts
  • Gender:Male
  • Location:Bulgaria, EU

Posted 12 January 2013 - 05:46 PM

Glad I could help! :)

Please run OTL and click on CleanUp button. Next, manually delete Junkware Removal Tool and SecurityCheck.


Safe surfing! :)
My help is free, however, if you wish to make a small donation to show appreciation and to help me continue the fight against Malware, then click here paypal.gif

#49 Maurice Naggar

Maurice Naggar

    Staff

  • Moderators
  • PipPipPipPipPipPip
  • 14,550 posts
  • Gender:Male
  • Location:USA
  • Interests:Security, Windows, Windows Update, malware prevention

Posted 13 January 2013 - 03:19 PM

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!
Maurice Naggar
Product Support

staff.png

Follow us: Twitter, Become a fan: Facebook

I close my threads if there is 5 days without a response.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users