If you are not sure which version applies to your system download both of them and try to run them. Note: You need to run the version compatible with your system. Please download Farbar Recovery Scan Tool and save it to your Desktop. There are two versions, a 32-bit and a 64-bit version It’s ability to work in the recovery environment makes it particularly useful in dealing with problems associated with machines experiencing difficulty when booting up. Farbar’s Recovery Scan Tool is designed to run on Windows XP, Windows Vista, Windows 7, Windows 8 and Windows 10 Operating Systems. It will work equally well in normal or safe mode and where a machine has boot up problems it will work efficiently in the Windows Recovery Environment. I hope this helps people in the same situation.Farbar Recovery Scan Tool (FRST) is a diagnostic tool incorporating the ability to execute prepared script solutions on malware infected machines. I have not bothered to clean up all the other registry entries and hard drive folders because I am happy that it is all unhooked and not active. I then did a reboot and I no longer get the annoying Wondershare helper dialog boxes. You may find you have more than one "RUN" key (in my case my computer has a WOW6432 redirection subnode so I have two RUN keys) so keep looking for any RUN keys where wshelper.exe may be hiding. Also backup your registry by creating a restore point in control panel * Only follow this procedure if you are experienced. If you accidentally delete anything else you can cause damage to your computer. * Be careful not to delete anything else apart from the wshelper.exe value. Once you have found the wshelper.exe value under a RUN key then delete it. The 'RUN' keys are important because this is how software hooks into the computer startup sequence. Keep pressing F3 to find the next match until you eventually find a match sitting inside a RUN key. You will find lots of matches but you can ignore most of them. I went into standard malware clean-up mode: Open regedit and search for wshelper.exe. I uninstalled Wondershare from control panel but when I reboot a dialogue box appears every time saying that "wondershare helper compact" wants to modify the system. Note: I do not recommend using the above REG file on a 32-bit OS because 32-bit windows structures the registry differently without all the WOW6432Node bits. That's as much as I could find to clean up. If it's still there, I'd have ended it forcefully.įinally it should be safe to delete the following directory, noting that this is the name of the directory on a 64-bit OS, and if you have a 32-bit OS, the (x86) piece will not be part of the path:Ĭ:\Program Files (x86)\Common Files\Wondershare I think this was running before I ran the REG file, but seemed to go away afterwards. Then check task manager for a process called Wondershare Studio. It actually just deleted all those keys and values, and added nothing. Ignore the fact that the message says it "added" information to the registry. Under the heading Internet (Whitelisted), I found this line:īHO-x32: Wondershare AllMyTube 4.2.0 -> ] HKLM-x32.\Run: => C:\ProgramData\Wondershare\AllMyTube\DelayPluginI.exe HKLM-x32.\Run: => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe Under the heading Registry (Whitelisted), I found these lines: However, I did run the Farbar Recovery Scan Tool as this person did, and I found some references to Wondershare in the FRST.txt file. The only problem is their solution was specific to that user's machine, and I can't download the fixlist.txt supplied by the admin in this thread to see what he did. I found someone with the same problem on this forum: It did what I wanted but it seemed really sketchy and it made my laptop start working so hard that my fan kicked on without any user input, so I turned off the wifi and uninstalled it right away and now I'm paranoid that I'm a part of some botnet or someone's got my saved chrome passwords.Įven after I uninstalled it, there were still files in C:/Program Files (x86)/Common Files/Wondershare, C:/Program Files/Common Files/Wondershare, C:/ProgramData/Wondershare, and there was a. I was making a dvd and I didn't know how to download videos from, so I went out on a limb and tried Wondershare Allmytube. So I made a mistake and ran a dubious executable program downloaded from the internet.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |