ronsherman
asked on
How to remove Symantec Download Manager
I have uninstalled Norton 360 and run their removal tool. But I still find "Symantec Download Manager" in c:\windows\downloaded program files. I think it is an ActiveX control? When I right-button and choose "Remove" it goes away but then reappears as soon as I refresh the window. Similar behavior if I try to remove it through Internet Explorer Options. The other symptom, I think, is that when I download any attachment from Yahoo e-mail on Firefox, the Download popup shows a logo "Norton Anti-Virus". I have replaced Norton with another anti-virus/firewall package and am not sure who, if anyone, is now really checking my e-mail.
Hi,
Please download and run "Norton Removal Tool"
ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe
A Symantec Certified Specialist @ your service
Please download and run "Norton Removal Tool"
ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe
A Symantec Certified Specialist @ your service
ASKER
To xmachine: Thanks; but I have already downloaded and run the Norton Removal Tool (twice)
To Michael_MCDST: Thanks. I don't see the process either Task manager or in procexp output. I believe it is an ActiveX control and so probably only gets run for attachments? But I am guessing,wildly, that its presence blocks any other anti-virus package from checking downloads; or that it part of IE or Yahoo itself. There are definitely registryy enties for Symantec. When I feel especially confident I might try to do some manual registry editing.
To Michael_MCDST: Thanks. I don't see the process either Task manager or in procexp output. I believe it is an ActiveX control and so probably only gets run for attachments? But I am guessing,wildly, that its presence blocks any other anti-virus package from checking downloads; or that it part of IE or Yahoo itself. There are definitely registryy enties for Symantec. When I feel especially confident I might try to do some manual registry editing.
Hi,
You need to set the "Killbit" for all Norton activex components in Registry. Do the following please:
Mostly, Norton will use these CLSID's:
{602ADB0E-4AFF-4217-8AA1-9 5DAC4DFA40 8}
{6D53EC84-6AAE-4787-AEEE-F 4628F01010 C}
{7FEBEFE3-6B19-4349-98D2-F FB09D4B49C A}
1) BackUp registry for safety issues
2) Start > Run > Regedit
3) Go to [HKEY_LOCAL_MACHINE\SOFTWA RE\Microso ft\Interne t Explorer\ActiveX Compatibility\CLSID of the ActiveX control] and view the data value of the Compatibility Flags DWORD value of the ActiveX object CLSID.
4) Alter the Compatibility Flags DWORD value to 0x400 (in hex) or 1024 (in decimal).
Check this link: http://www.pc1news.com/restricting-activex-applets-in-internet-explorer-1188.html
5) Restart Internet Explorer.
Try now and see
A Symantec Certified Specialist @ your service
You need to set the "Killbit" for all Norton activex components in Registry. Do the following please:
Mostly, Norton will use these CLSID's:
{602ADB0E-4AFF-4217-8AA1-9
{6D53EC84-6AAE-4787-AEEE-F
{7FEBEFE3-6B19-4349-98D2-F
1) BackUp registry for safety issues
2) Start > Run > Regedit
3) Go to [HKEY_LOCAL_MACHINE\SOFTWA
4) Alter the Compatibility Flags DWORD value to 0x400 (in hex) or 1024 (in decimal).
Check this link: http://www.pc1news.com/restricting-activex-applets-in-internet-explorer-1188.html
5) Restart Internet Explorer.
Try now and see
A Symantec Certified Specialist @ your service
ASKER
Thanks. I tried the IE7 method, which involves tools/manage add-ons/enable or disable addons/dowloaded activex controls. I can "DISABLE" the Symantic Download Manager but I cannot DELETE it. The Delete just flashes the screen, and it comes back as either disabled or enabled - but won't go away. A seriously sticky bit (joke). Even after a reboot
Norton 360 IE browser BHO are:
C:\PROGRA~1\COMMON~1\SYMAN T~1\IDS\IP SBHO.dll
C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2. 6\CoIEPlg. dll
Try deleting them
C:\PROGRA~1\COMMON~1\SYMAN
C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.
Try deleting them
ASKER
C:\Program Files\Common Files\SymantecxShared\CCPD -LC/symlcr st.dll
C:\Program Files\Common Files\SymantecxShared\Lice nses/*.ssf
C:\Program Files\Common Files\SymantecxShared\Supp ort Controls/sdcnetck.dll
ssextern.dll
ssrunsa.exe
wificfg.exe
C:\Program Files\Common Files\SymantecxShared\Supp ort Controls\SymaDataDelivery/ ccL7OU.dll
SymAData.dll
are the files I have in in those folders
C:\Program Files\Common Files\SymantecxShared\Lice
C:\Program Files\Common Files\SymantecxShared\Supp
ssextern.dll
ssrunsa.exe
wificfg.exe
C:\Program Files\Common Files\SymantecxShared\Supp
SymAData.dll
are the files I have in in those folders
ASKER
NB - that "x" in between Symantec and Shared was something I tried, a week ago, to make these files invisible without deleting them
Did you try deleting the following DLL's:
C:\PROGRA~1\COMMON~1\SYMAN T~1\IDS\IP SBHO.dll
C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2. 6\CoIEPlg. dll
C:\PROGRA~1\COMMON~1\SYMAN
C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.
ASKER
I searched for CoIEPlg.dll and IPSBHO.dll in my c:\Program Files\Common Files and they are not there. The files in my prior post are the only ones remaining in c:\Program Files\Common Files\Symantec Shared
Also, the ID of Symantec Download Manager is {6A344D34-5231-452A-8A57-D 064AC9B786 2} and this is NOT in the registry in [HKEY_LOCAL_MACHINE\SOFTWA RE\Microso ft\Interne t Explorer\ActiveX Compatibility
I attached a screenshot
Also, the ID of Symantec Download Manager is {6A344D34-5231-452A-8A57-D
I attached a screenshot
If you disable the add-on in IE and then remove the registry entries as I for mentioned then you shuld be right as rain. How to the Nortons removal tool work for you? That is also an excellent idea.
I ran the Norton Removal Tool twice and it did nothing. I don't see Registry Entries for the download's ID in the registry. Since I was not sure whether I could manually safely remove the last remaining 6 files in COMMON/SYMANTEC I remained each of them. So perhaps it is effectively gone. But I still don't understand why a DELETE in IE (Tools/ADDONS) does not work? This morning, with IE NOT running, and the Symantec Download Manager DISABLED, I tried to DELETE it from Windoews Explorer - received "Share Violation" These program files are currently being used etc. Used by whom?
Use this utility, it should remove it completely
http://windowsxp.mvps.org/toolbarcop.htm
http://www.softpedia.com/progDownload/Toolbarcop-Download-8846.html
http://windowsxp.mvps.org/toolbarcop.htm
http://www.softpedia.com/progDownload/Toolbarcop-Download-8846.html
Thanks. Looks like a nice tool. But it does not handle "Downloaded ActiveX Controls" which is what the Symantec Download Manager is.
DLAC.doc
DLAC.doc
ASKER
I deleted every Symantec folder and file I could find (after searching for any of them in C:); then I booted up in safe Mode. and with NOTHING running except for a DOS (Command) window, I went to C:\Windows\Downloaded Program Files and did an "erase symdlmgr.dll" But I still got ACCESS DENIED!! The ID of the code is {6A344D34-5231-452A-8A57-D 064AC9B786 2} and I did not find that in [HKEY_LOCAL_MACHINE\SOFTWA RE\Microso ft\Interne t Explorer\ActiveX Compatibility
How do I get rid of this monstrosity????
How do I get rid of this monstrosity????
ASKER
I just searched the registry for 6A344D34-5231-452A-8A57-D0 64AC9B786 and found it in
My Computer\HKEY_CLASSES_ROOT \CLSID\6A3 44D34-5231 -452A-8A57 -D064AC9B7 86e
The entry is for Symantec Download Manager and has filled in fields "inprocServer32" that points to c:\windows\download programs manager and threading modelof "apartment" (???). The progid and versionindependantprogid name symantec Download Manager. and the Typelib is Default {4786.......}.
I am quiet ready to delete this entry from the registry but its being in HKEY_CLASSES_ROOT somewhat freaks me out.
My Computer\HKEY_CLASSES_ROOT
The entry is for Symantec Download Manager and has filled in fields "inprocServer32" that points to c:\windows\download programs manager and threading modelof "apartment" (???). The progid and versionindependantprogid name symantec Download Manager. and the Typelib is Default {4786.......}.
I am quiet ready to delete this entry from the registry but its being in HKEY_CLASSES_ROOT somewhat freaks me out.
It helps to know what Email program you run by default, and to ensure that it isn't Norton default within the Email routines that are confusing things. Many, such as I think Yahoo and others appear to use the Norton interface.
ASKER
I use Firefox/Yahoo. I also asked this question on a Firefox forum and they said that I needed to get that Symantec download manager uninstalled otherwise I would not be getting protection from my new anti-virus program since the download protection would appear to be from Norton/Symantec,which is no longer installed (and so has no updates or virus recognition etc.).
When I have an attachment I see the Norton logo on the pop-up, but that must be, I assume, false protection.
A real Catch-22
When I have an attachment I see the Norton logo on the pop-up, but that must be, I assume, false protection.
A real Catch-22
Which version of IE are you using? If ver = 7 please follow this:
http://blogs.msdn.com/ie/archive/2006/06/12/628499.aspx
http://blogs.msdn.com/ie/archive/2006/06/12/628499.aspx
ASKER
Thanks. I am on IE 7 and did just try the "reset" per your link. Unfortunately the rest does not seem to impact ActiveX controls, which is what symdlmgr.dll is (Symantec Download Manager). So even after the reset I could not DELETE it from IE (either before or after restarting it) and could not erase it via a Command Window. I had tried this previoiusly with a Safe Mode boot and still no success. I assume that Registry entry in Root must be causing a very basic part of Windows to run it.
C:\WINDOWS\Downloaded Program Files>erase symdlmgr.dll
C:\WINDOWS\Downloaded Program Files\symdlmgr.dll
Access is denied.
C:\WINDOWS\Downloaded Program Files>erase symdlmgr.dll
C:\WINDOWS\Downloaded Program Files\symdlmgr.dll
Access is denied.
One of many Email programs includes as a piece of their Email program the Norton interface. Also have other Antivirus programs in use, so was surprised when logging in and using Yahoo with various ISPs and providers and always getting attachments checked via Norton, despite the uninstalls. I finally decided that it's a free service, does work to scan attachments, does update, doesn't interfere or conflict with other concurrent programs (McAfee, etc), so let them co-exist on both Vista and XP platforms and works well.
":0) Asta
":0) Asta
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks. fileassassin did manage to delete the file from the folder windows\downloaded program files. It then showed up as "damaged". So I went to IE and was, finally, able to DELETE it from "Manage Addons". Now it no longer shows in that Windows folder. So object achieved. But when I bring back yahoo (after rebooting my system), and try to download an attachment,the "Norton 360" logo still shows up - so I have to believe, as one of the other responders said, it must be part of Yahoo itself since I see it under Firefox or IE.
Glad you solved it ... :)
Nothing should say "Access Denied" any more ....
Nothing should say "Access Denied" any more ....
ASKER
Exactly right
Click Start > Run and type cmd and hit enter.
Look under HKEY_CURRENT_USER - look in the software folder
and
HKEY_LOCAL_MACHINE - look in the software folder