Q&A Uninstalling Zemana leaves Drivers behind?

Discussion in 'Zemana' started by Spawn, Jan 14, 2017.

Tags:
  1. Spawn

    Spawn Administrator
    Staff Member Content Creator

    Jan 8, 2011
    16,261
    24,197
    Uninstalled Zemana Anti-Malware Premium about 3 months ago, but I discover the drivers are still loaded into Windows 10.

    Zemana leaving drivers behind is normal?

    upload_2017-1-15_1-16-49.png upload_2017-1-15_1-18-59.png
     
    Sunshine-boy, DardiM, Jack and 5 others like this.
  2. Evjl's Rain

    Evjl's Rain Level 29
    Trusted AV Tester

    Apr 18, 2016
    1,815
    13,231
    Vietnam
    Windows 8.1
    Avast
    I and a few users also posted 2-3 threads here about this and never get a proper answer
    we have to use autoruns to disable those 2 drivers -> reboot -> delete .sys files manually. Uninstallers seem to be uneffective
     
  3. whizkidraj

    whizkidraj Level 8

    Nov 9, 2012
    359
    435
    Studying - Bachelor of Engineering (IT)
    Mumbai, Maharashta, India
    Windows 10
    Kaspersky
    Use Revo Uninstaller Pro
     
    DardiM and AtlBo like this.
  4. Evjl's Rain

    Evjl's Rain Level 29
    Trusted AV Tester

    Apr 18, 2016
    1,815
    13,231
    Vietnam
    Windows 8.1
    Avast
    I tried geek, revo, iobit uninstallers, all of them couldn't remove those files. Just manually
    someone said jv16 could remove but I haven't tried it yet
     
  5. whizkidraj

    whizkidraj Level 8

    Nov 9, 2012
    359
    435
    Studying - Bachelor of Engineering (IT)
    Mumbai, Maharashta, India
    Windows 10
    Kaspersky
    Hmm gotta report it to Zemana people. They respond very fast.
     
    DardiM, askmark and XhenEd like this.
  6. AtlBo

    AtlBo Level 22

    Dec 29, 2014
    1,144
    4,517
    Qihoo 360
    Comodo Programs Manager might get them. It finishes program removals during boots. Only trouble is that the programs should be installed for Windows 7 mode. Then make sure all the .exes (application files) in the CPM folder are set to run in Win 7 mode. Also, set all of them to "Run as administrator" at the same time if you use a limited account. CPM is underrated I feel.
     
    Sunshine-boy and DardiM like this.
  7. Terry Ganzi

    Terry Ganzi Level 23

    Feb 7, 2014
    1,292
    6,432
    The Claim that revo uninstaller pro doesn't remove the drivers is false,may be on his or her pc but on mine revo removes everything.
    Revo must be configured properly first of all, because straight out the box usage does not produce full power.
     
    ispx likes this.
  8. motox781

    motox781 Level 5

    Apr 1, 2015
    242
    749
    USA
    Windows 10
    Kaspersky
    Please elaborate on proper settings? Serious question BTW, just curious. Thanks.
     
    DardiM likes this.
  9. Zero Knowledge

    Zero Knowledge Level 5

    Dec 2, 2016
    239
    692
    Dark Cloud Universe
    Yes Zemana leaves behind .sys files. Even with the portable version .sys files are left behind.

    Only option is to remove the file manually.
     
  10. Berny

    Berny Level 2

    Oct 14, 2016
    75
    260
    Europe
    Windows 10
    Kaspersky
    #10 Berny, Jan 15, 2017
    Last edited: Jan 15, 2017
    JV 16 Power Tools worked out fine for me to clean leftovers.
    Just take care when using this (advanced) application and backup your Registry before proceeding !
     
    Sunshine-boy and DardiM like this.
  11. tonibalas

    tonibalas Level 38
    Trusted

    Sep 26, 2014
    2,796
    19,967
    I also have used Revo pro to uninstall Zemana AM and just checked the drivers.
    There is no ZAM driver left.
    But after uninstalling it i opened regedit and deleted some registry keys that were left behind.
     
    DardiM likes this.
  12. Evjl's Rain

    Evjl's Rain Level 29
    Trusted AV Tester

    Apr 18, 2016
    1,815
    13,231
    Vietnam
    Windows 8.1
    Avast
    #12 Evjl's Rain, Jan 15, 2017
    Last edited: Jan 15, 2017
    This is the screenshot of Revo 3.1.8 with the latest database
    First it uninstalled using the official unistaller -> I chose Advanced leftover scan in Revo -> The driver still persists, Advanced scan cannot find the .sys file in "drivers" folder

    What's the problem? I also have the portable version. However, Revo should also detect .sys file
    [​IMG]
    I don't know what else to tweak Revo
     
    Sunshine-boy, tonibalas and askmark like this.
  13. Spawn

    Spawn Administrator
    Staff Member Content Creator

    Jan 8, 2011
    16,261
    24,197
    I will try this, I also found leftover Files from AntiLogger Free on my system.

    The manual method is always the better option, because I don't think I will use Revo Pro just to remove a few files. @Evjl's Rain Did you restart after uninstallation with Revo and is that Pro or Free?

    Thanks for the suggestions given the in this thread. :)
     
    DardiM and askmark like this.
  14. Evjl's Rain

    Evjl's Rain Level 29
    Trusted AV Tester

    Apr 18, 2016
    1,815
    13,231
    Vietnam
    Windows 8.1
    Avast
    I think I restarted but it always persisted. ZAM.trace and ZAM.krnl.trace kept creating themselves after 2 minutes even after ZAM was uninstalled (drivers were not yet deleted)
     
    Sunshine-boy, Parsh, DardiM and 2 others like this.
  15. askmark

    askmark Level 11

    Aug 31, 2016
    512
    4,202
    united kingdom
    Windows 10
    Default-Deny
    If you want to remove the driver completely manually then:

    Go to command prompt and type:

    sc stop ZAM_Guard
    sc delete ZAM_Guard
    del c:\windows\system32\drivers\zamguard64.sys
     
    GonzitoVir, Berny, Nikos751 and 5 others like this.
  16. Spawn

    Spawn Administrator
    Staff Member Content Creator

    Jan 8, 2011
    16,261
    24,197
    Discovered more entries by Zemana (AntiLogger Free). :(

    upload_2017-1-15_17-50-4.png

    @askmark How can I find out their service names?
     
    askmark, Parsh and DardiM like this.
  17. pablozi

    pablozi Level 22
    Trusted

    Jun 14, 2011
    1,156
    4,927
    Null Island
    Windows 10
    Default-Deny
    It is a bit pity that product cannot be uninstalled properly without using 3rd party tools, playing with the registry or looking manually in system folders.
    Zemana should really improve their product and instead of removing functions from ZAM/ZAL they should polish their default uninstaller or provide an extra cleanup tool like Emsisoft for example.
     
  18. DardiM

    DardiM Level 26
    Trusted AV Tester

    May 14, 2016
    1,567
    15,194
    France
    Windows 10
    Kaspersky
    #18 DardiM, Jan 15, 2017
    Last edited: Jan 15, 2017
    Question - Zemana dropped files
    => how to remove the services

    +

    About activity even with a portable version
    But when we uninstall the program, strange behavior.
     
    askmark, Parsh and Spawn like this.
  19. askmark

    askmark Level 11

    Aug 31, 2016
    512
    4,202
    united kingdom
    Windows 10
    Default-Deny
    Personally, I would use ServiWin from Nirsoft to identify any services or drivers published by Zemana.
     
  20. Terry Ganzi

    Terry Ganzi Level 23

    Feb 7, 2014
    1,292
    6,432
    #20 Terry Ganzi, Jan 15, 2017
    Last edited by a moderator: Jan 15, 2017
    Revo.PNG Revo 2.PNG
    And also activate Trace mode and install programs in trace mode.
     
    pablozi, tonibalas and whizkidraj like this.
Loading...
Similar Threads Forum Date
Runtime error at 46:134 could not call proc while uninstalling Malwarebytes Malwarebytes Dec 21, 2017
Q&A System Image Restore after uninstalling VoodooShield? General Security Discussions Jul 9, 2017
Q&A Webroot issues uninstalling Webroot Sep 29, 2016