Webroot's SPYSWEEPER

I uninstalled an earlier version of Webroot?s SpySeeper. I then installed
the latest version. Immediately after a successful installation I started
receiving numerous pop-ups telling me that SpySweeper is blocking my system
from contacting various possible spyware sites. About every two minutes it
would pop-up with a different site. I then uninstalled the program. Removed
all the files relating to SpySweeper from my hard drive. Then I Used JV16
to find any SpySweeper entries in the registry, it found several and I
deleted them. However, about 9 remained that I was unable to delete. I then
ran REGEDIT and tried to delete them one at a time. This is an example of
one of the entries?????.

HKLM\system\controlset003\enum\root\legacy_webrootspysweeperservice\0000\

The other 8 are all similar to the above. The error response I get is
?Windows core returned the following error, Access denied or invalid key?
Need help in finding a way to delete these 9 registry entries. I?d like to
get rid of them before I install the previous version of SpySweeper then I?ll
install the latest version over top of the previous version. Any ideas as
to why the continuous pop-ups?

Thank you for any help.

sandy58
Mon Aug 18 09:15:29 PDT 2008

On Aug 18, 5:05=A0pm, "Charles" <cem...@wideopenwest.com> wrote:
> I uninstalled an earlier version of Webroot=92s SpySeeper. =A0I then inst=
alled
> the latest version. Immediately after a successful installation I started
> receiving numerous pop-ups telling me that SpySweeper is blocking my syst=
em
> from contacting various possible spyware sites. =A0About every two minute=
s it
> would pop-up with a different site. =A0I then uninstalled the program. Re=
moved
> all the files relating to SpySweeper from my hard drive. =A0Then I Used J=
V16
> to find any SpySweeper =A0entries in the registry, it found several and I
> deleted them. However, about 9 remained that I was unable to delete. =A0I=
then
> ran REGEDIT and tried to delete them one at a time. =A0This is an example=
of
> one of the entries=85=85=85=85=85.
>
> HKLM\system\controlset003\enum\root\legacy_webrootspysweeperservice\0000\
>
> The other 8 are all similar to the above. =A0 The error response I get is
> =93Windows core returned the following error, Access denied or invalid ke=
y=94
> Need help in finding a way to delete these 9 registry entries. =A0I=92d l=
ike to
> get rid of them before I install the previous version of SpySweeper then =
I=92ll
> install the latest version over top of the previous version. =A0Any ideas=
as
> to why the continuous pop-ups?
>
> Thank you for any help.

Windows/prefetch........

John
Mon Aug 18 09:19:28 PDT 2008

Charles wrote:

> I uninstalled an earlier version of Webroot?s SpySeeper. I then installed
> the latest version. Immediately after a successful installation I started
> receiving numerous pop-ups telling me that SpySweeper is blocking my system
> from contacting various possible spyware sites. About every two minutes it
> would pop-up with a different site. I then uninstalled the program. Removed
> all the files relating to SpySweeper from my hard drive. Then I Used JV16
> to find any SpySweeper entries in the registry, it found several and I
> deleted them. However, about 9 remained that I was unable to delete. I then
> ran REGEDIT and tried to delete them one at a time. This is an example of
> one of the entries?????.
>
> HKLM\system\controlset003\enum\root\legacy_webrootspysweeperservice\0000\
>
> The other 8 are all similar to the above. The error response I get is
> ?Windows core returned the following error, Access denied or invalid key?
> Need help in finding a way to delete these 9 registry entries. I?d like to
> get rid of them before I install the previous version of SpySweeper then I?ll
> install the latest version over top of the previous version. Any ideas as
> to why the continuous pop-ups?

Look for the phantom device in the Device Manager:

Device Manager does not display devices that are not connected to the
Windows XP-based computer
http://support.microsoft.com/kb/315539

This little batch file will automatically set the Device Manager to show
phantom devices and open it for you:

----------------------------------------------------
set devmgr_show_nonpresent_devices-1
start devmgmt.msc

----------------------------------------------------

You cannot delete the keys because you do not have permission to do so,
grant yourself the necessary permissions and you will be able to remove
the keys. Before you do that keep in mind that there is a good reason
why only the System account has permission to delete keys in the in the
\Enum branch!

Before you change the permissions and delete keys please read the following:

Enum
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/30004.mspx?mfr=true

System and Startup Settings
http://technet.microsoft.com/en-us/library/bb742541.aspx

HKEY_LOCAL_MACHINE\SYSTEM\Select
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/34102.mspx?mfr=true

John

Charles
Mon Aug 18 18:13:33 PDT 2008

This one did the trick. After removing 3 Spysweeper entries from the non
plug n play and then re-booting the entries in the registry disappeared.
Tomorr ow I'll try to reinstall. Thanks for all the help.

-Charles


"John John (MVP)" <audetweld@nbnet.nb.ca> wrote in message
news:g8c7as$1lm$1@aioe.org...
> Charles wrote:
>
>> I uninstalled an earlier version of Webroot?s SpySeeper. I then
>> installed the latest version. Immediately after a successful installation
>> I started receiving numerous pop-ups telling me that SpySweeper is
>> blocking my system from contacting various possible spyware sites. About
>> every two minutes it would pop-up with a different site. I then
>> uninstalled the program. Removed all the files relating to SpySweeper
>> from my hard drive. Then I Used JV16 to find any SpySweeper entries in
>> the registry, it found several and I deleted them. However, about 9
>> remained that I was unable to delete. I then ran REGEDIT and tried to
>> delete them one at a time. This is an example of one of the
>> entries?????.
>>
>> HKLM\system\controlset003\enum\root\legacy_webrootspysweeperservice\0000\
>>
>> The other 8 are all similar to the above. The error response I get is
>> ?Windows core returned the following error, Access denied or invalid key?
>> Need help in finding a way to delete these 9 registry entries. I?d like
>> to get rid of them before I install the previous version of SpySweeper
>> then I?ll install the latest version over top of the previous version.
>> Any ideas as to why the continuous pop-ups?
>
> Look for the phantom device in the Device Manager:
>
> Device Manager does not display devices that are not connected to the
> Windows XP-based computer
> http://support.microsoft.com/kb/315539
>
> This little batch file will automatically set the Device Manager to show
> phantom devices and open it for you:
>
> ----------------------------------------------------
> set devmgr_show_nonpresent_devices-1
> start devmgmt.msc
>
> ----------------------------------------------------
>
> You cannot delete the keys because you do not have permission to do so,
> grant yourself the necessary permissions and you will be able to remove
> the keys. Before you do that keep in mind that there is a good reason why
> only the System account has permission to delete keys in the in the \Enum
> branch!
>
> Before you change the permissions and delete keys please read the
> following:
>
> Enum
> http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/30004.mspx?mfr=true
>
> System and Startup Settings
> http://technet.microsoft.com/en-us/library/bb742541.aspx
>
> HKEY_LOCAL_MACHINE\SYSTEM\Select
> http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/34102.mspx?mfr=true
>
> John
>

John
Mon Aug 18 18:46:44 PDT 2008

You're welcome.

John

Charles wrote:

> This one did the trick. After removing 3 Spysweeper entries from the non
> plug n play and then re-booting the entries in the registry disappeared.
> Tomorr ow I'll try to reinstall. Thanks for all the help.
>
> -Charles
>
>
> "John John (MVP)" <audetweld@nbnet.nb.ca> wrote in message
> news:g8c7as$1lm$1@aioe.org...
>
>>Charles wrote:
>>
>>
>>>I uninstalled an earlier version of Webroot?s SpySeeper. I then
>>>installed the latest version. Immediately after a successful installation
>>>I started receiving numerous pop-ups telling me that SpySweeper is
>>>blocking my system from contacting various possible spyware sites. About
>>>every two minutes it would pop-up with a different site. I then
>>>uninstalled the program. Removed all the files relating to SpySweeper
>>>from my hard drive. Then I Used JV16 to find any SpySweeper entries in
>>>the registry, it found several and I deleted them. However, about 9
>>>remained that I was unable to delete. I then ran REGEDIT and tried to
>>>delete them one at a time. This is an example of one of the
>>>entries?????.
>>>
>>>HKLM\system\controlset003\enum\root\legacy_webrootspysweeperservice\0000\
>>>
>>>The other 8 are all similar to the above. The error response I get is
>>>?Windows core returned the following error, Access denied or invalid key?
>>>Need help in finding a way to delete these 9 registry entries. I?d like
>>>to get rid of them before I install the previous version of SpySweeper
>>>then I?ll install the latest version over top of the previous version.
>>>Any ideas as to why the continuous pop-ups?
>>
>>Look for the phantom device in the Device Manager:
>>
>>Device Manager does not display devices that are not connected to the
>>Windows XP-based computer
>>http://support.microsoft.com/kb/315539
>>
>>This little batch file will automatically set the Device Manager to show
>>phantom devices and open it for you:
>>
>>----------------------------------------------------
>>set devmgr_show_nonpresent_devices-1
>>start devmgmt.msc
>>
>>----------------------------------------------------
>>
>>You cannot delete the keys because you do not have permission to do so,
>>grant yourself the necessary permissions and you will be able to remove
>>the keys. Before you do that keep in mind that there is a good reason why
>>only the System account has permission to delete keys in the in the \Enum
>>branch!
>>
>>Before you change the permissions and delete keys please read the
>>following:
>>
>>Enum
>>http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/30004.mspx?mfr=true
>>
>>System and Startup Settings
>>http://technet.microsoft.com/en-us/library/bb742541.aspx
>>
>>HKEY_LOCAL_MACHINE\SYSTEM\Select
>>http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/34102.mspx?mfr=true
>>
>>John
>>
>
>
>