Q&A Uninstalling Zemana leaves Drivers behind?

Discussion in 'Zemana' started by Spawn, Jan 14, 2017.

Tags:
  1. Svoll

    Svoll Level 12

    Nov 17, 2016
    554
    6,418
    Student/Engineering Failure
    US
    macOS Sierra
    Norton
    I just tried uninstalling ZAL myself and its took me quite a while to narrow down where most of the left files are. Had to use 3 apps to help me somewhat remove most of them (autoruns, RevoUninstaller, and Everything). There are quite a few traces left in the registry.

    In addition to what others can't remove, Everything found folders left in the syswow64 folder.

    [​IMG]

    Even deleting the keycrypt64, Event log still shows it tied with Wininit

    [​IMG]
     
    bjm_, frogboy, pablozi and 1 other person like this.
  2. Sunshine-boy

    Sunshine-boy Level 22

    Apr 1, 2017
    1,171
    5,189
    IRAN
    Windows 10
    ESET
    +1
     
  3. WinXPert

    WinXPert Level 23
    Trusted AV Tester

    Jan 9, 2013
    1,298
    4,725
    Graphic Artist
    Manila
    Windows 7
    Emsisoft
    Manual deletion
    • Use everything, search for ZAM and Zemana and delete all folder/files found
    • Manually delete ZAM and Zemana on registry entries
     
    Berny, frogboy and Sunshine-boy like this.
  4. TairikuOkami

    TairikuOkami Level 8
    Content Creator

    May 13, 2017
    378
    1,599
    Postal Worker
    Slovakia
    Windows 10
    #24 TairikuOkami, Jul 5, 2017
    Last edited: Jul 5, 2017
    Code:
    sc config ZAM start= disabled
    sc config ZAM_Guard start= disabled
    net stop ZAM /y
    net stop ZAM_Guard /y
    sc delete ZAM
    sc delete ZAM_Guard
    reg delete "HKCU\Software\Zemana" /f
    reg delete "HKLM\Software\Zemana" /f
    reg delete "HKLM\Software\ZmnGlobalSDK" /f
    takeown /f "%WINDIR%\System32\drivers\zam64.sys" /a
    icacls "%WINDIR%\System32\drivers\zam64.sys" /grant:r Administrators:F /c
    del "%WINDIR%\System32\drivers\zam64.sys" /s /f /q
    takeown /f "%WINDIR%\System32\drivers\zamguard64.sys" /a
    icacls "%WINDIR%\System32\drivers\zamguard64.sys" /grant:r Administrators:F /c
    del "%WINDIR%\System32\drivers\zamguard64.sys" /s /f /q
    takeown /f "%ProgramFiles(x86)%\Zemana AntiMalware" /a /r /d y
    icacls "%ProgramFiles(x86)%\Zemana AntiMalware" /inheritance:r /grant:r Administrators:(OI)(CI)F /t /c
    rd "%ProgramFiles(x86)%\Zemana AntiMalware" /s /q
    rd "%LocalAppData%\Zemana" /s /q
    rd "%WINDIR%\SysWOW64\config\systemprofile\AppData\Local\Zemana" /s /q
     
    bjm_, mojaveron, Nick Lock and 6 others like this.
  5. KevinYu0504

    KevinYu0504 Level 3

    Mar 10, 2017
    129
    291
    Taiwan
    Windows 10
    Emsisoft
    Thanks for your provide the code ,
    it's pretty useful !
     
    bjm_ likes this.
  6. mojaveron

    mojaveron Level 1

    Nov 27, 2013
    17
    35
    Mojave Desert
    Thanks for the code, should it be saved as a .bat file?
     
  7. TairikuOkami

    TairikuOkami Level 8
    Content Creator

    May 13, 2017
    378
    1,599
    Postal Worker
    Slovakia
    Windows 10
    Yes or just copy it to CMD ran as admin.
     
    bjm_ and mojaveron like this.
Loading...
Similar Threads Forum Date
Runtime error at 46:134 could not call proc while uninstalling Malwarebytes Malwarebytes Dec 21, 2017
Q&A System Image Restore after uninstalling VoodooShield? General Security Discussions Jul 9, 2017
Q&A Webroot issues uninstalling Webroot Sep 29, 2016