6 minutes ago, hazelnut said:<div class="ipsQuote_contents"> <p> Just checking that you have done a full <strong>Restart</strong> of your machine today (not shutdown) since doing some of the things above. </p> </div>
Yes, I have, but I can do another restart in a few hours. ?
But FYI, the security provider page in the Windows Security App never listed Kaspersky (since uninstalling it, of course).
I was just hoping a full restart might confuse Speccy and stop it telling lies
@hazelnut Yeah, I assumed so. When I deleted the Antivirus Listing for Kaspersky through cmd, CTRL+R refreshed Speccy and Kaspersky no longer appeared in the Antivirus section.
It should be the same for the Firewall display name in my opinion.
If you go (carefully) to
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
and expand the uninstall list, do you see anything in the list K related?
The number ones you can see what they are by clicking on them.
3 minutes ago, hazelnut said:<div class="ipsQuote_contents"> <p> and expand the uninstall list, do you see anything in the list K related? </p> </div>
I've just gone through the entire list, but there is nothing related to Kaspersky.
Just a thought that may or may not work:
Have you tried uninstalling Speccy and reinstalling it?
Some entry/flag may have got stuck in Speccy itself?
1 hour ago, nukecad said:<div class="ipsQuote_contents"> <p> Have you tried uninstalling Speccy and reinstalling it? </p> </div>
@nukecad Just tried that. Speccy's output is the same as before. Thanks for trying to help, though
Interesting read that involves the role WMI plays.
https://stackoverflow.com/questions/13615203/check-for-third-party-firewalls-on-a-machine
(just in case you haven't done enough reading lately !!)
31 minutes ago, hazelnut said:<div class="ipsQuote_contents"> <p> <a contenteditable="false" data-ipshover="" data-ipshover-target="<___base_url___>/profile/98259-maximtv/?do=hovercard" data-mentionid="98259" href="<___base_url___>/profile/98259-maximtv/" rel="">@MaximTV</a> </p> <p> Interesting read that involves the role WMI plays. </p> <p> <a href="https://stackoverflow.com/questions/13615203/check-for-third-party-firewalls-on-a-machine" rel="external nofollow">https://stackoverflow.com/questions/13615203/check-for-third-party-firewalls-on-a-machine</a> </p> <p> (just in case you haven't done enough reading lately !!) </p> </div>
It does seem interesting but also complicated at the same time haha. Unsure if the code provided there can help me in any way?
9 minutes ago, MaximTV said:<div class="ipsQuote_contents ipsClearfix" data-gramm="false"> <p> Unsure if the code provided there can help me in any way? </p> </div>
Probably i you are a software dev!!
Speccy uses WMI to pull a lot of the info it shows.
I gather you have once again reached your posting limit for the day.
Have you ever used Windows Repair by Tweaking.com?
I was just wondering if it would reset the WMI
https://community.ccleaner.com/topic/60445-speccy-malfunction/#comment-328976
https://www.tweaking.com/content/page/windows_repair_all_in_one.html
Very odd case, I didn't know Kaspersky was quite so... persistent!
In any event, in trying a few things, I might have an answer for you.
Similar to what Hazel had you run for finding the AV in WMI, this command:
Quote<div class="ipsQuote_contents ipsClearfix" data-gramm="false"> <p> wmic /Node:localhost /Namespace:\\root\SecurityCenter2 Path FirewallProduct get * /value </p> </div>
should show the Kaspersky firewall.
From there, the instructions in: <a href="https://support.cloudradial.com/hc/en-us/articles/360049084271-Removing-Old-Antivirus-Listings-from-Security-Center" ipsnoembed="true" rel="external nofollow">https://support.cloudradial.com/hc/en-us/articles/360049084271-Removing-Old-Antivirus-Listings-from-Security-Center</a> altered to FirewallProduct instead of AntiVirusProduct may allow you to finally exorcise it. (It goes without saying to be very, very careful, of course.)
Hey everyone,
My posting restriction has been lifted, so now I'm able to share an update on this issue.
19 hours ago, hazelnut said:<div class="ipsQuote_contents"> <p> Interesting read that involves the role WMI plays. </p> <p> <a href="https://stackoverflow.com/questions/13615203/check-for-third-party-firewalls-on-a-machine" rel="external nofollow">https://stackoverflow.com/questions/13615203/check-for-third-party-firewalls-on-a-machine</a> </p> </div>
I converted the C# script that had been posted there to an .exe File through PowerShell using the following command:
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /t:exe /out:MyApplication.exe MyApplication.cs
Make sure to create a .cs file (using Editor) containing the C# script beforehand. Once I converted it to an .exe file, I was able to run it and it then gave me this result:
This means that Kaspersky Internet Security is still registered as a third-party firewall in Windows, even though it had been uninstalled a few months ago (incl. all registry entries and leftover files).
17 hours ago, hazelnut said:<div class="ipsQuote_contents"> <p> Have you ever used Windows Repair by Tweaking.com? </p> <p> I was just wondering if it would reset the WMI </p> </div>
I've also tried performing the WMI Repair through the Windows Repair by Tweaking.com application. Unfortunately, it did not change anything and Speccy still mentioned Kaspersky Internet Security in the firewall section.
16 hours ago, johnccleaner said:<div class="ipsQuote_contents"> <p> Similar to what Hazel had you run for finding the AV in WMI, this command: </p> <blockquote class="ipsQuote" data-ipsquote=""> <div class="ipsQuote_citation"> Quote </div> <div class="ipsQuote_contents"> <p> wmic /Node:localhost /Namespace:\\root\SecurityCenter2 Path FirewallProduct get * /value </p> </div> </blockquote> <p> should show the Kaspersky firewall. From there, the instructions in: <a href="https://support.cloudradial.com/hc/en-us/articles/360049084271-Removing-Old-Antivirus-Listings-from-Security-Center" rel="external nofollow">https://support.cloudradial.com/hc/en-us/articles/360049084271-Removing-Old-Antivirus-Listings-from-Security-Center</a> altered to FirewallProduct instead of AntiVirusProduct may allow you to finally exorcise it. (It goes without saying to be very, very careful, of course.) </p> </div>
This actually resolved this issue and Speccy now no longer mentions Kaspersky Internet Security at all. ?
I'm glad I was able to get rid of it and thanks again to every person who has participated in this thread ?