Rising AV Uninstall left behind hidden files

Discussion in 'other anti-virus software' started by Tadoussac, Jul 31, 2008.

Thread Status:
Not open for further replies.
  1. Tadoussac

    Tadoussac Registered Member

    Joined:
    Sep 6, 2006
    Posts:
    118
    [SOLVED] Rising AV Uninstall left behind hidden files

    I decided to remove Rising AV - and I'm testing Vipre at the moment.

    I noticed during a scan, that a file named C:\rising.ini was being scanned. It's hidden from explorer, even after I select "view hidden files" in XP Folder Options.

    I can't delete this ini file, even from the command prompt, yet if I type C:\rising.ini into the explorer address bar, a small text file opens with the following:

    [MAIN]
    InstallPath=C:\Program Files\Rising\Rav
    LinuxUpdatePath=C:\Program Files\Rising\Rav
    UpdatePath=/Program Files/Rising/Rav/Def

    I searched my drive and regedit for all traces of "RAV" and "RISING", and everything comes up clean.

    Two questions:

    (1) How can I get rid of the .ini file?
    (2) How can I see what other hidden debris may have been left behind by Rising AV?
     
    Last edited: Jul 31, 2008
  2. ink

    ink Registered Member

    Joined:
    May 20, 2006
    Posts:
    185
    Besides "view hidden files", you may try "view system protected files", then check the property of this file.
    I don't think there are other hidden files except C:\ and installation folder
     
  3. cruelsister

    cruelsister Registered Member

    Joined:
    Nov 6, 2007
    Posts:
    971
    Location:
    Paris
    I used Revo Uninstaller when I dumped it and it seems to have taken care of everything that the Rising uninstaller left behind.

    No real problem here.
     
  4. Tadoussac

    Tadoussac Registered Member

    Joined:
    Sep 6, 2006
    Posts:
    118
    Thanks ink and cruelsister!

    No matter what I do, I can't make the file C:\rising.ini visible on my system - so I can't check its properties, nor can I delete it. (I tried every "View File" option, and even tried in Safe mode).

    But, if I open WinXP Explorer, and type C:\rising.ini into an address bar, the text file pops open.

    It's very strange, and I wonder if any other former Rising AV users can replicate this?
     
  5. doktornotor

    doktornotor Registered Member

    Joined:
    Jul 19, 2008
    Posts:
    2,047
    Geez... May I suggest that you learn to use a decent file manager, such as Total Commander, Speed Commander, Altap Salamander or whatever similar? :rolleyes:
     
  6. Tadoussac

    Tadoussac Registered Member

    Joined:
    Sep 6, 2006
    Posts:
    118
    Thanks doktornotor, I'll investigate if a different file manager can help me view what i can't view now.

    In the meantime, here's a screenshot of the existing problem from WinXP CMD.

    (1) C:\> dir doesn't show the rising.ini file .. i'm not really surprised.
    (2) Delete (del) fails (file not found)
    (3) Executing C:\rising.ini opens the file in notepad
     

    Attached Files:

  7. doktornotor

    doktornotor Registered Member

    Joined:
    Jul 19, 2008
    Posts:
    2,047
    May I suggest

    Code:
    dir /?
    del /?
    
    and reading on the attributes thing...
     
  8. Tadoussac

    Tadoussac Registered Member

    Joined:
    Sep 6, 2006
    Posts:
    118
    [SOLVED] Re: Rising AV Uninstall left behind hidden files

    doktornotor:

    I installed Total Commander before I had the opportunity to see your suggested DOS commands for search and delete.

    Within 30 seconds, I figured out how to make hidden files visible within TC, and the unwanted ini file was gone! Nice n' easy ...

    Thanks again for your assistance!
     
  9. doktornotor

    doktornotor Registered Member

    Joined:
    Jul 19, 2008
    Posts:
    2,047
    Re: [SOLVED] Re: Rising AV Uninstall left behind hidden files

    NP and welcome to the "Explorer sucks" club... ;) :D
     
  10. silver0066

    silver0066 Registered Member

    Joined:
    Dec 31, 2004
    Posts:
    929
    I just uninstalled with Revo Advanced and I could replicate.

    I had to make the System files visible in order to see it. There is also another file, C:\RAV.bin, which you can see also and delete with Explorer.

    There were also several Rising entries left in the Registry which I picked up with Registry Crawler. A couple needed the permissions changed in order to delete them.
     
Loading...
Thread Status:
Not open for further replies.