Webroot's SPYSWEEPER

[Charles]

I uninstalled an earlier version of Webroot’s SpySeeper. I then installed
the latest version. Immediately after a successful installation I started
receiving numerous pop-ups telling me that SpySweeper is blocking my system
from contacting various possible spyware sites. About every two minutes it
would pop-up with a different site. I then uninstalled the program. Removed
all the files relating to SpySweeper from my hard drive. Then I Used JV16
to find any SpySweeper entries in the registry, it found several and I
deleted them. However, about 9 remained that I was unable to delete. I then
ran REGEDIT and tried to delete them one at a time. This is an example of
one of the entries…………….

HKLM\system\controlset003\enum\root\legacy_webrootspysweeperservice\0000\

The other 8 are all similar to the above. The error response I get is
“Windows core returned the following error, Access denied or invalid key”
Need help in finding a way to delete these 9 registry entries. I’d like to
get rid of them before I install the previous version of SpySweeper then I’ll
install the latest version over top of the previous version. Any ideas as
to why the continuous pop-ups?

Thank you for any help.

 

[sandy58]

I uninstalled an earlier version of Webroot’s SpySeeper.  I then installed
the latest version. Immediately after a successful installation I started
receiving numerous pop-ups telling me that SpySweeper is blocking my system
from contacting various possible spyware sites.  About every two minutes it
would pop-up with a different site.  I then uninstalled the program. Removed
all the files relating to SpySweeper from my hard drive.  Then I Used JV16
to find any SpySweeper  entries in the registry, it found several and I
deleted them. However, about 9 remained that I was unable to delete.  Ithen
ran REGEDIT and tried to delete them one at a time.  This is an exampleof
one of the entries…………….

HKLM\system\controlset003\enum\root\legacy_webrootspysweeperservice\0000\

The other 8 are all similar to the above.   The error response I get is
“Windows core returned the following error, Access denied or invalid key”
Need help in finding a way to delete these 9 registry entries.  I’d like to
get rid of them before I install the previous version of SpySweeper then I’ll
install the latest version over top of the previous version.  Any ideasas
to why the continuous pop-ups?

Thank you for any help.

Windows/prefetch........

 

[John John (MVP)]

I uninstalled an earlier version of Webroot’s SpySeeper. I then installed
the latest version. Immediately after a successful installation I started
receiving numerous pop-ups telling me that SpySweeper is blocking my system
from contacting various possible spyware sites. About every two minutes it
would pop-up with a different site. I then uninstalled the program. Removed
all the files relating to SpySweeper from my hard drive. Then I Used JV16
to find any SpySweeper entries in the registry, it found several and I
deleted them. However, about 9 remained that I was unable to delete. I then
ran REGEDIT and tried to delete them one at a time. This is an example of
one of the entries…………….

HKLM\system\controlset003\enum\root\legacy_webrootspysweeperservice\0000\

The other 8 are all similar to the above. The error response I get is
“Windows core returned the following error, Access denied or invalid key”
Need help in finding a way to delete these 9 registry entries. I’d like to
get rid of them before I install the previous version of SpySweeper then I’ll
install the latest version over top of the previous version. Any ideas as
to why the continuous pop-ups?

Look for the phantom device in the Device Manager:

Device Manager does not display devices that are not connected to the
Windows XP-based computer
http://support.microsoft.com/kb/315539

This little batch file will automatically set the Device Manager to show
phantom devices and open it for you:

----------------------------------------------------
set devmgr_show_nonpresent_devices-1
start devmgmt.msc

----------------------------------------------------

You cannot delete the keys because you do not have permission to do so,
grant yourself the necessary permissions and you will be able to remove
the keys. Before you do that keep in mind that there is a good reason
why only the System account has permission to delete keys in the in the
\Enum branch!

Before you change the permissions and delete keys please read the following:

Enum
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/30004.mspx?mfr=true

System and Startup Settings
http://technet.microsoft.com/en-us/library/bb742541.aspx

HKEY_LOCAL_MACHINE\SYSTEM\Select
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/34102.mspx?mfr=true

John

 

[Charles]

This one did the trick. After removing 3 Spysweeper entries from the non
plug n play and then re-booting the entries in the registry disappeared.
Tomorr ow I'll try to reinstall. Thanks for all the help.

-Charles

 

[John John (MVP)]

You're welcome.

John

This one did the trick. After removing 3 Spysweeper entries from the non
plug n play and then re-booting the entries in the registry disappeared.
Tomorr ow I'll try to reinstall. Thanks for all the help.

-Charles