Wondershare Pdf Ocr

0 views
Skip to first unread message

Marietta Bleasdale

unread,
Aug 3, 2024, 5:06:22 PM8/3/24
to weinimule

I had this problem too, and for some reason, spotlight search didn't show where the folders were. When the pop-up window appears, go to the activity monitor. You should see the wondershare process running in the list of apps that are running. Highlight wondershare and then click on the info icon at the top which will show you the location of the files. (probably user/library/application support). Go to the indicated folder and move all wondershare files to the trash. It's a good idea to check for files in the preferences folder as well.

So I made a mistake and ran a dubious executable program downloaded from the internet. I was making a dvd and I didn't know how to download videos from funnyordie.com, so I went out on a limb and tried Wondershare Allmytube. It did what I wanted but it seemed really sketchy and it made my laptop start working so hard that my fan kicked on without any user input, so I turned off the wifi and uninstalled it right away and now I'm paranoid that I'm a part of some botnet or someone's got my saved chrome passwords.

The only problem is their solution was specific to that user's machine, and I can't download the fixlist.txt supplied by the admin in this thread to see what he did. However, I did run the Farbar Recovery Scan Tool as this person did, and I found some references to Wondershare in the FRST.txt file.

How do I take all references to Wondershare off of whitelists? It seems like that's a security threat and I'm trying to patch it. (I have also run malwarebytes, and it detected and removed several threats.) Am I looking at this problem the right way?

Wondershare and now iSkysoft (I tried iSkysoft Video Editor) seem to exhibit some behaviors similar to malware in that a hidden piece of software is installed and set to run constantly in the background even after un-install. This is very "rude". In my efforts to clean up what it has done I have resorted to the following.

Then check task manager for a process called Wondershare Studio. I think this was running before I ran the REG file, but seemed to go away afterwards. If it's still there, I'd have ended it forcefully.

Even after you do the usual install/uninstall programmes route of uninstalling Wondershare, when you do a search for it there are still many files left on your system. If you try to delete them it will refuse because "it is open". Usually it's the Wondershare helper which stays open, which prevents you from deleting the files. Go control.alt.delete, open processes, find the helper and end task, then do a search for Wondershare and delete all remaining files.

I had the same problem. I uninstalled Wondershare from control panel but when I reboot a dialogue box appears every time saying that "wondershare helper compact" wants to modify the system.I went into standard malware clean-up mode: Open regedit and search for wshelper.exe. You will find lots of matches but you can ignore most of them. Keep pressing F3 to find the next match until you eventually find a match sitting inside a RUN key. The 'RUN' keys are important because this is how software hooks into the computer startup sequence. Once you have found the wshelper.exe value under a RUN key then delete it.* Be careful not to delete anything else apart from the wshelper.exe value. If you accidentally delete anything else you can cause damage to your computer. Only follow this procedure if you are experienced. Also backup your registry by creating a restore point in control panel *You may find you have more than one "RUN" key (in my case my computer has a WOW6432 redirection subnode so I have two RUN keys) so keep looking for any RUN keys where wshelper.exe may be hiding.I then did a reboot and I no longer get the annoying Wondershare helper dialog boxes. I have not bothered to clean up all the other registry entries and hard drive folders because I am happy that it is all unhooked and not active.I hope this helps people in the same situation.

c80f0f1006
Reply all
Reply to author
Forward
0 new messages