Link to home
Start Free TrialLog in
Avatar of ronsherman
ronshermanFlag for United States of America

asked on

How to remove Symantec Download Manager

I have uninstalled Norton 360 and run their removal tool. But I still find "Symantec Download Manager" in c:\windows\downloaded program files.  I think it is an ActiveX control? When I right-button and choose "Remove"  it goes away but then reappears as soon as I refresh the window. Similar behavior if I try to remove it through Internet Explorer Options.  The other symptom, I think, is that when I download any attachment from Yahoo e-mail on Firefox, the Download popup shows a logo  "Norton Anti-Virus".   I have replaced Norton with another anti-virus/firewall package and am not sure who, if anyone, is now really checking my e-mail.
Avatar of Michael_MCDST
Michael_MCDST
Flag of Denmark image

First, check if the program is running in your Proccesses of the Task Manager. Then go into your registry and delete any entries there that refer to Symantec or Nortons.
Click Start > Run and type cmd and hit enter.
Look under HKEY_CURRENT_USER - look in the software folder
and
HKEY_LOCAL_MACHINE - look in the software folder
Hi,

Please download and run "Norton Removal Tool"

ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe


A Symantec Certified Specialist @ your service
Avatar of ronsherman

ASKER

To xmachine: Thanks; but  I have already downloaded and run the Norton Removal Tool (twice)

To Michael_MCDST: Thanks.  I don't see the process either Task manager or in procexp  output.  I believe it is an ActiveX control and so probably only gets run for attachments? But I am guessing,wildly, that  its presence blocks any other anti-virus package from checking downloads;  or that it part of IE or Yahoo itself.  There are definitely registryy enties for Symantec.  When I feel especially confident I might try to do some manual registry editing.
Hi,

You need to set the "Killbit" for all Norton activex components in Registry. Do the following please:

Mostly, Norton will use these CLSID's:

{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}

{6D53EC84-6AAE-4787-AEEE-F4628F01010C}

{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}


1) BackUp registry for safety issues

2) Start > Run > Regedit

3) Go to [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\CLSID of the ActiveX control] and view the data value of the Compatibility Flags DWORD value of the ActiveX object CLSID.

4) Alter the Compatibility Flags DWORD value to 0x400 (in hex) or 1024 (in decimal).

Check this link: http://www.pc1news.com/restricting-activex-applets-in-internet-explorer-1188.html

5) Restart Internet Explorer.

Try now and see

A Symantec Certified Specialist @ your service
Thanks.  I tried the IE7 method, which involves tools/manage add-ons/enable or disable addons/dowloaded activex controls.  I can "DISABLE" the Symantic Download Manager but I cannot DELETE it.  The Delete just flashes the screen, and it comes back as either disabled or enabled - but won't go away.  A seriously sticky bit (joke).  Even after a reboot
Norton 360 IE browser BHO are:

C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll

C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll

Try deleting them


C:\Program Files\Common Files\SymantecxShared\CCPD-LC/symlcrst.dll
C:\Program Files\Common Files\SymantecxShared\Licenses/*.ssf
C:\Program Files\Common Files\SymantecxShared\Support Controls/sdcnetck.dll
                                            ssextern.dll
                                            ssrunsa.exe
                                             wificfg.exe
C:\Program Files\Common Files\SymantecxShared\Support Controls\SymaDataDelivery/ccL7OU.dll
                                                       SymAData.dll

are the files I have in in those folders


NB - that "x" in between Symantec and Shared  was something I tried, a week ago, to  make these files invisible without deleting them
Did you try deleting the following DLL's:

C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll

C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll

I searched for CoIEPlg.dll   and IPSBHO.dll   in my c:\Program Files\Common Files and they are not there.  The files in my prior post are the only ones remaining in c:\Program Files\Common Files\Symantec Shared

Also, the ID of Symantec Download Manager is {6A344D34-5231-452A-8A57-D064AC9B7862}  and this is NOT in the registry in   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility

I attached a screenshot
If you disable the add-on in IE and then remove the registry entries as I for mentioned then you shuld be right as rain. How to the Nortons removal tool work for you? That is also an excellent idea.
Avatar of hpsuser
hpsuser

I ran the Norton Removal Tool twice and it did nothing.  I don't see Registry Entries for the download's ID in the registry.  Since I was not sure whether I could manually safely remove the last remaining 6 files in COMMON/SYMANTEC  I remained each of them.  So perhaps it is effectively gone.  But I still don't understand why a DELETE in IE (Tools/ADDONS)  does not work?  This morning, with IE NOT running, and the Symantec Download Manager DISABLED, I tried to DELETE it from Windoews Explorer - received "Share Violation"  These program files are currently being used etc.    Used by whom?
Thanks.  Looks like a nice tool.  But it does not  handle "Downloaded ActiveX Controls"  which is what the Symantec Download Manager is.  
DLAC.doc
I deleted every Symantec folder  and file I could find (after searching for any of them in C:);  then I booted up in safe Mode. and with NOTHING running except for a DOS (Command) window, I went to C:\Windows\Downloaded Program Files and did an  "erase symdlmgr.dll"  But I still got ACCESS DENIED!!   The ID of the code is  {6A344D34-5231-452A-8A57-D064AC9B7862}  and I did not find that in [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility

How do I get rid of this monstrosity????
I just searched the registry for 6A344D34-5231-452A-8A57-D064AC9B786   and found it in
My Computer\HKEY_CLASSES_ROOT\CLSID\6A344D34-5231-452A-8A57-D064AC9B786e

The entry is for Symantec Download Manager and has filled in fields "inprocServer32" that points to c:\windows\download programs manager and threading modelof "apartment" (???).  The progid and versionindependantprogid  name symantec Download Manager.  and the Typelib is Default {4786.......}.

I am quiet ready to delete this entry from the registry but its being in HKEY_CLASSES_ROOT somewhat freaks me out.
Avatar of Asta Cu
It helps to know what Email program you run by default, and to ensure that it isn't Norton default within the Email routines that are confusing things.  Many, such as I think Yahoo and others appear to use the Norton interface.
I use Firefox/Yahoo.  I also asked this question on a Firefox forum and they said that I needed to get that Symantec download manager uninstalled otherwise I would not be getting protection from my new anti-virus program since the download protection would appear to be from Norton/Symantec,which is no longer installed (and so has no updates or virus recognition etc.).    

When I have an attachment I see the Norton logo on the pop-up, but that must be, I assume, false protection.

A real Catch-22
Which version of IE are you using? If ver = 7 please follow this:

http://blogs.msdn.com/ie/archive/2006/06/12/628499.aspx
Thanks.  I am on IE 7 and did just try the "reset"  per your link.  Unfortunately the rest does not seem to impact ActiveX controls, which is what symdlmgr.dll is (Symantec Download Manager).  So even after the reset I could not DELETE it from IE (either before or after restarting it) and could not erase it via a Command Window.  I had tried this previoiusly with a Safe Mode boot and still no success.  I assume that Registry entry in Root must be causing a very basic part of Windows to run it.

C:\WINDOWS\Downloaded Program Files>erase symdlmgr.dll
C:\WINDOWS\Downloaded Program Files\symdlmgr.dll
Access is denied.
One of many Email programs includes as a piece of their Email program the Norton interface.  Also have other Antivirus programs in use, so was surprised when logging in and using Yahoo with various ISPs and providers and always getting attachments checked via Norton, despite the uninstalls.  I finally decided that it's a free service, does work to scan attachments, does update, doesn't interfere or conflict with other concurrent programs (McAfee, etc), so let them co-exist on both Vista and XP platforms and works well.
":0)  Asta
ASKER CERTIFIED SOLUTION
Avatar of xmachine
xmachine
Flag of Kuwait image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks.  fileassassin did manage to delete the file from the folder windows\downloaded program files.  It then showed up as "damaged".  So I went to IE and was, finally, able to DELETE it from "Manage Addons". Now it no longer shows in that Windows folder.  So object achieved.  But when I bring back yahoo (after rebooting my system), and try to download an attachment,the "Norton 360" logo still shows up - so I have to believe, as one of the other responders said, it must be part of Yahoo itself since I see it under Firefox or IE.
Glad you solved it ... :)

Nothing should say "Access Denied" any more ....
Exactly right