Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 6 subscribers
  • Views 7326 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Webroot System Analyzer AND Virus Removal Tool issues/questions

Clue_Less

Oh good Gawd!  Firstly, two mentions:  1) I created the masterpiece which follows so carefully and wonderfully.  When I hit the "POST" button I received an error message ("Authentication Failed.").  What appears below is an attempt at a copy/paste job.  And 2) as I was creating the following I was also running both of two Sophos programs.  While running both, they  KILLED my system resources! 

__________

Warning: 1) This post is long and 2) I am not a techie.

Background: Last March (2012) I developed a problem. My Win7 (64bit) PC would not connect to the internet. Neither I nor my (Cox) cable tech could figure out why. I succumbed to taking my PC into the Nerd Herds at Best Buy. (Problem turned out to be nothing more than a bad Ethernet card.)

While at Best Buy, one of the Nerds installed (on my desktop) a folder titled Webroot System Analyzer. I believe the Nerd was to uninstall/remove the folder before I left but he did not. Inside this folder are several sub-folders, numerous .dll files, as well as two .exe files: SAAssist.exe and SystemAnalyzer.exe.

An aside -- Over the past 8 months I have (updated and) run SystemAnalyzer.exe a dozen times. The results of these scans remain constant: SystemAnalyzer indicates I have 7 malware and 7 Trojan files on my computer. (For many years I have run several times a week -- if not daily -- several different anti-virus/anti-malware programs including Spybot and Malwarebytes. None have ever indicated I have any malware or trojans.) My anti-virus program is AVG. After considerable research I have, rightly or wrongly, concluded that SystemAnalyzer is finding bits and pieces of old stuff which may have once been on my PC but no longer "exist." Further, I find no way to tell the program to "quit finding this stuff."

A further aside -- Today I downloaded and ran Sophos' Virus Removal Tool. It indicated I had one malware file: FakeAvCn-C. Researching that file leads me to believe it is a temporary, harmless item. That said, on to my question (finally)....

I want to remove/uninstall the "Webroot System Analyzer" folder and all its associated files and programs but I can't figure out how. SystemAnalyzer.exe does not appear in my add/remove list. What does appear in the list (besides my recently installed Virus Removal Tool) is an item titled Sophos AutoUpdate. Attempting to uninstall that entry results in an "Internal Error 2738." (And, yes, I have read both on Sophos and elsewhere about that error message.) I do not simply want to delete the Webroot System Analyzer folder from my desktop because I suspect many/all of the files in that folder are now scattered throughout my hard drive.

Daily, if not several times a day, I run my favorite program: CCleaner. Every time I run CCleaner it finds a whole host of Sophos files to "clean." Most of them are .dll files.. I delete them, reboot, and they are all back again -- and, no, I do NOT load anything Sophos related on start-up. (CCleaner log files available if helpful.)

I suspect Sophos is a reputable company with good and safe products. I have nothing against Sophos. But I neither want nor need anything Sophos-related on my computer. Please tell me how to safely and completely remove/uninstall the folder Webroot System Analyzer and all it's related folders/files/programs.

Thanks! :smileyhappy:

:34767


This thread was automatically locked due to age.
  • 0

    Hi,

    Well we can try first for Sophos, if the 2738 error is the key to installing AutoUpdate, then:

    http://www.sophos.com/en-us/support/knowledgebase/42914.aspx

    is the KBA related to it, but I guess you've found that?

    A Google around points at this FixIt Tool from Microsoft: http://go.microsoft.com/?linkid=9804433, not sure if you're tried that?  But ia assume it just recovers the VBScript runtime.  As that seems to be what that error code refers to: 

    http://blogs.msdn.com/b/heaths/archive/2007/05/31/windows-installer-errors-2738-and-2739-with-script-custom-actions.aspx

    Once that's fixed I would expect AutoUpdate can be removed from Programs and Features/Add or Remove programs.

    Note: Manually deleting files and them coming back is most likely a case of MSI repairing the installation which would be expected.  You might even find an entry in the Windows event log to say MSI kicked in to repair it.

    As for Webroot System Analyzer, either it's installed or can simply be copied to a directory and run from that, essentially being self contained. A few way to check:

    1. Scan through the registry keys (run Regedit.exe):

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

    and if 64-bit also:

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall

    looking for references to Webroot System Analyzer.  If you find something then hopefully there is a "UninstallString" entry for it.   You can run that command to uninstall it.

    2. You could search the entire registry for the file names in the Webroot System Analyze folder, particularly the dll names and exe names. If you don't find many references to the files, especially in HKCR or HKLM\software\classes (they are the same in effect).  Then there is a good chance the files aren't "registered" and there is a higher chance that the folder is standalone and the application can run directly from it without being "installed".

    3. Run something like AutoRuns (http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx) to see if you can find a start-up point for any of the files in the Webroot System Analyzer directory.  If you can't then it suggests again that it's not installed as such and adds more weight to the theory you can probably just delete it.

    If you don't think it's been "installed" based on the above checks.  Maybe then rename the directory, reboot and see how it goes for a day, if no ill effects, I suspect you can safely delete the directory.

    Regards,

    Jak

    :34769
  • 0

    Hi there Clue_Less,

    This is Greg from the Webroot Support Team responding to your post.  System Analyzer is just an executable and does not install any additional files.  You should be able to just delete the directory from your PC.  Please let me know if you have any problems doing so and I will assist you further.

    Thanks,

    Greg  :smileylol:

    :34851