Prevx 3 - uninstalled but still showing in Security Center

[Ade 1]

Hi there,

A friend of mine was trialling Prevx 3 on his Vista x64 pc. He's since uninstalled it (don't ask me why!) through add/remove programs, rebooted but Windows Security Center is still showing it as being enabled under the Anti-Spyware section. I've gone through the usual (ie. checking for any remaining Prevx folders, pausing Windows Management Service, deleting the repository folder under system32/wbem, and restarting the service and also using the Prevx uninstall tool) but it just keeps reappearing in the Security Center.

Any ideas anyone?

Thanks.

[PrevxHelp]

Hello,
Tell him to please try clicking Start > Run > and type: wbemtest.exe
and click OK.

Then, click Connect... and type: root\securitycenter
into the Namespace box. and then click Connect again.

Next, click Enum Classes... at the top right and click OK to the next dialog.

Then, double click the entry which reads AntiSpywareProduct and then click the Instances button on the right side of the following screen. There should be an entry with the characters D486329C as the first 8 characters in the "instanceGuid"

Select that entry and click Delete, then click Close, and then Save Object, then Close, and then Exit.

Then, click Start > Run and type:

sc stop wscsvc

and hit OK. After that go back to Start > Run and type:

sc start wscsvc

and hit OK.

If this still reports Prevx 3.0 as being in his system, try once more changing the connection step to: root\securitycenter2 instead of root\securitycenter and that should solve it

Let me know how it works out!

[Ade 1]

Hi. Thanks for your help.

However, when selecting D486329C and choosing 'delete', the following message appears:-

Number: 0x80041003
Facility: WMI
Description: Access denied

He is running as administrator.

Any further help would be appreciated.

Cheers.

[PrevxHelp]

Is it possible that UAC is enabled? There shouldn't be any restrictions on the entry besides UAC/LUA.

[Ade 1]

UAC is enabled. I'll get him to try it with it disabled and/or perhaps in safe mode. Will get back to you.

[Ade 1]

Hi again. Tried what you said in safe mode and all is well. Many thanks for your help.