Uninstall MS Antispyware (Event ID 1001)

[David Reed]

Hi all,

I'm trying desperately to remove MS antispyware. One of my users installed
it on another users computer, without my knowledge or permission. I don't
know why, but it's not listed in the Add/Remove Programs.

The computer, when it boots, and the user logs in under their profile, the
computer boots to the desktop, and then, Windows Installer "takes over", and
seems to be trying to install something. I can't tell what, it doesn't show
me. It appears twice, and then the users desktop (background) disappears,
and the Windows default "Bubbles" background appears, the screen goes blank
(except for that), and just sits there, with the mouse cursor.

I can still move the mouse cursor. The system doesn't seem to freeze. But
it does seem to hang after the Windows Installer tries to install or run MS
Antispyware. (As indicated by the follow errors in the Event Log (App)
#1001

Detection of product '{536F7C74-844B-4683-B0C5-EA39E19A6FE3}', feature
'GIANT_AntiSpyware_Files' failed during request for component
'{997FA962-E067-11D1-9396-00A0C90F27F9}'

Does anyone know how I can manually remove this, and/or hopefully stop this
problem?

Any help would be greatly appreciate...

-David

 

[Andre Da Costa]

Did you attempt removing in Safe mode?
--
Andre
Extended64 | http://www.extended64.com
Blog | http://www.extended64.com/blogs/andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

 

[Guest]

Hi David:
Running as a limited user is another way to prevent this issue. Limited
users don't have the permissions needed to install programs.

Engel

 

[David Reed]

Well, I looked at the Add/Remove Programs while in Safe Mode, but it's not
listed there.

I'm not able to "do anything" while NOT in Safe Mode, because as soon as the
user logins in, Windows Installer starts immediately, attempts to install
something (which I have no idea what, since it doesn't say), and then clears
the screen, puts up the default "Bubbles" background, and, I want to say,
just "sits there"...except that I am sure that the computer is still
"running", it's not "frozen", it just sits at the "Bubbles" background, with
nothing else on the screen except the mouse cursor, which I can still move.

This is most frustrating!

-David

 

[David Reed]

Hi Engel,

Good point, and I admit I hadn't thought of that.

Okay, I'll try that, and get back to you in a bit!

Any other thoughts?

-David

 

[David Reed]

No luck...Even with the user on "User" local status, Windows Installer still
starts and runs when the user logs in.

This is the error that keeps appearing in the users Application Log whenever
they log in:

Detection of product '{536F7C74-844B-4683-B0C5-EA39E19A6FE3}', feature
'GIANT_AntiSpyware_Files' failed during request for component
'{997FA962-E067-11D1-9396-00A0C90F27F9}'

(and)

Failed to connect to server. Error: 0x80070422

-David

 

[Andre Da Costa]

Download Microsoft AntiSpyware again and rerun the setup and reinstall the
application (ensure you are doing this in an Administrator account). Also
turn off any AntiVirus utility you might have installed before attempting
installation.
http://www.microsoft.com/downloads/...A2-6A57-4C57-A8BD-DBF62EDA9671&displaylang=en
--
Andre
Extended64 | http://www.extended64.com
Blog | http://www.extended64.com/blogs/andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

 

[David Reed]

Hi there,

I will do that. I hope I don't need an internet connection AT the PC,
because it doesn't have it at this time.

I will download this and put it on CD. I actually HAD thought of this, but
hadn't gotten to it yet.

Is there a Defs file with it when you download it?

-David

 

[Dave M]

Hi Dave...
Yes, but grab the latest defs as well, then add these files to your MSAS folder,
the new ones (5775) should be out later today stay tuned...

Goto these sites:

http://download.spynet.com/ASDefinitions/gcDeterminationData.gcd

http://download.spynet.com/ASDefinitions/gcThreatAuditScanData.gcd

http://download.spynet.com/ASDefinitions/gcThreatAuditThreatData.gcd

 

[Guest]

Hello... it seems the MSoft.com page for MS AS recoommended Uninstalling
Giant AS. I remember this because I thought it odd that only one AS Utility
was on the "uninstall" list, versus the recommendation to disable or turn off
any existing AS utility.....

 

[Dave M]

The reason they specifically recommend uninstalling Giant is probably that both
programs are almost duplicates of each other, imagine the conflicts. MSAS was
and still is basically the original Giant code... Ms had about 20 days to modify
it before releasing it as Beta1. That, in re-engineering terms is about enough
time to do a global change to Giant / Microsoft on the display screens, and then
check out the basic functionality. So we're still seeing the name Giant all
over the package, and probably will until Beta2 arrives. The signature
definitions do (still?) come from Spynet, although that also will change to Ms
Update with the introduction of Windows® Defender in the first half of 2006.

I should add... any AS package that features a Real Time Protection function can
conflict with the current Beta1, use caution. CounterSpy and Spybot's Teatimer
come immediately to mind as potential problems, though it's not always the case.
I use SpySweeper and MSAS with few problems, even though both feature RTP.

 

[Frank Saunders, MS-MVP OE]

Well, I looked at the Add/Remove Programs while in Safe Mode, but
it's not listed there.

I'm not able to "do anything" while NOT in Safe Mode, because as soon
as the user logins in, Windows Installer starts immediately, attempts
to install something (which I have no idea what, since it doesn't
say), and then clears the screen, puts up the default "Bubbles"
background, and, I want to say, just "sits there"...except that I am
sure that the computer is still "running", it's not "frozen", it just
sits at the "Bubbles" background, with nothing else on the screen
except the mouse cursor, which I can still move.
This is most frustrating!

-David

You looked for Microsoft Anti-Spyware?

--
Frank Saunders, MS-MVP OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/