There's a better way to uninstall programs that do not have an installer, and I recommend using Nirsoft's UninstallView. UninstallView is a tool for Windows that collects information about all programs installed on your system and displays the details of the installed programs in one table, so you can interogate the columns.
Sorting my Publisher column to reveal empty publisher is a good way to check for malware.
Available Columns to sort by
- Display Name: The official display name of the software (Stored in the Registry)
- Registry Name: The name of the Registry key (under HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall or HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall )
- Display Version: The official display version of the software (Stored in the Registry)
- Registry Time: The date/time that the Registry key of the software was modified. In most cases, this date/time represents the time that the software was installed or updated.
- Install Date: The official install date of the software, stored in the Registry by the installer of the software.
- Installed For: If the software was installed for specific user (under HKEY_CURRENT_USER) the name of the user profile is displayed. If the software was installed for all users (under HKEY_LOCAL_MACHINE), this columns tells you whether it's 32-bit or 64-bit installation.
- Install Location: The path of the folder where the software is installed.
- Install Folder Created Time: The creation date/time of the installation folder.
- Install Folder Modified Time: The modified date/time of the installation folder.
- Publisher: The creator of this software.
- Uninstall String: Full command to uninstall this software.
- Quiet Uninstall String: Full command to quietly uninstall this software.
- Change Install String: Full command to change the installation of this software.
- Comments: Comment about the software, stored in the uninstall Registry key by the software installer.
- About URL: URL for the link to the publishers home page or the application's home page.
- Update Info URL: URL for the link used to update information on the application.
- Help Link: Internet address for technical support
- Install Source: The folder that contained the installer files.
- Installer Name: Name of the installer that was used to install this software (Windows Installer, Nullsoft Install System, Inno Setup, and others...)
- Release Type: Displays the release type of this software, like 'Security Update', 'Update Rollup'. For most installed programs, this field is empty.
- Display Icon Path: Full path of filename that contains the icon of the software.
- MSI Filename: Specifies the MSI filename of this software (Windows Installer only)
- Estimated Size: Estimated size of this software (Taken from the Registry)
- Attributes: Displays attributes stored in the uninstall Registry key of this software ,like 'System Component', 'No Modify', 'Windows Installer'.
- Language: Langauge of the software (like en-US)
- Parent Key Name: Displays the Registry name of the parent uninstall item. Be aware that uninstall items with parent are displayed only when the 'Show Items With Parent Uninstall Entry' option is turned on.
- Registry Key: Full Path of the uninstall Registry key.
This will explore the beklow registry key for you.
For really technical removal you can explore the registry key path in the registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
Improvement from my last post using free tool from Microsoft, but limited.

 
No comments:
Post a Comment