Just did an uninstall of Sygate PFW. I usually comb through the registry and delete the leftovers. I came across a couple of entries under the heading : LEGACY_SMCSERVICE Isn't this part of Sygate ? It is a protected reg entry and cannot be deleted ! Anybody else have this issue ? ty, bill
Yup. I did some further research, and I found that these reg keys do apparently belong to Sygate: HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_SMCSERVICE\0000 HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_WG3N\0000 HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_SMCSERVICE\0000 HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_WG3N\0000 HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SMCSERVICE\0000 HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WG3N\0000
To the best of my knowledge, all those legacy keys are undeletable. I tried deleting some before, but could not.
I thought they might be leftovers from Sygate. Why would a person not be able to delete them? And we complain about ZA !! Their has to be a way to delete them !! I'll check into the Sygate forums as well ! thanks, bill
I've just posted this same question over at the Sygate forums. I'll will keep you updated on any fixes !! bill
A year ago someone else posted the same kind of question at comp.security.firewalls; but he got no reply: http://groups.google.com/groups?hl=nl&lr=&ie=UTF-8&threadm=3B1F90D0.F813B827%40ntr.net&rnum=1&prev=/groups%3Fq%3D%2522LEGACY_SMCSERVICE%2522%26hl%3Dnl%26lr%3D%26ie%3DUTF-8%26selm%3D3B1F90D0.F813B827%2540ntr.net%26rnum%3D1 Indeed: This site gives: http://www.igknighttec.com/Windows/WindowsXP/svchost_exe.php This site, while giving info about a Trojan, confirms that smc.exe belongs to Sygate Personal Firewall. http://www.pspl.com/virus_info/trojans/autoupder.htm
Very interesting. So it seems that Smc.exe is both a windows service file and an executable for Sygate? I have known instances in the past where Sygate was not doing a complete uninstall on some systems and causing problems such as an incomplete uninstall of ZA does. I wonder if this has something to do with it. I noticed, FanJ, that at the very end of that google post, the guy came back and said, "Nevermind.......got rid of 'em". I'd like to know how he did that. I have never been able to delete anything that said legacy. I'm guessing that legacy files are holdovers from previous OS versions, but its hard to find much information on them, at least where I looked. Good information, my friend.
OK guys and gals, after a couple of hours searching Google, I found the solution and it works. Here ya' go, but it's slow loading http://www.experts-exchange.com/Operating_Systems/Win2000/Q_11198919.html Also, I got a few answers at the Sygate forums as well..... http://forums.sygatetech.com/showthread.php?s=9d2fb85738238257d2af412f6e7f0e4f&postid=11102#post11102 And while I was using REGEDT32.EXE, I had to search manually. I couldn't search for keys automatically !! regards, bill