Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I'm sorry to bother everyone again, but I have a really strange problem-- I downloaded Tweak UI directly from Microsoft but I can't remove it. When I try to uninstall it, it deletes half the program, and then Norton pops up a warning.
"Alert: Malicious script detected
Object FileSystem Object
Activity DeleteFile
Your computer is halted and needs to do something about this script:
WINDOWS\System32\TweakUI.exe\uninstall.hta"It then asks whether I should stop the script or allow it.
I downloaded a second version of the program from somewhere else. I thought I'd overwrite it and delete it, but the old version remained after the new version was removed. The new version also deleted without the "malicious code" warning. I can't use system restore because it wasn't on at the time, but I want this infernal program off my machine. Will someone please help me?

Namor27:
Have you tried to delete Tweak UI in Safe Mode?
Also, check the registry for any entries left behind, both by the second (un-installed) version of Tweak UI and the original that's giving you the hard time.
Solarian

I tried Safe Mode as suggested, but it didn't seem to make a difference. I'm worried about working in the registry-- I'm just not that competent with my machine. I also discovered I was wrong, it doesn't even get as far as deleting any files, just the start menu icon (it shows a checklist). Is there some way I can get passed the malicious code part, so I can finish uninstalling?

Namor27:
Okay, first, Tweak UI is nothing malicious in and of itself. I've got it installed on my own PC. Strangely, I had to re-install it a couple of times because it kept disappearing! Go figure.
I know the Norton warnings are a pain in the butt, but that's all they are--an annoyance.
Before trying to delete that .exe file, it would be best to remove its associated keys out of the registry FIRST. You say you're uncomfortable going into the registry. Wisely, a lot of people are.
For safety in the registry and to speed things up, download a copy of RegSeeker. You'll find a free copy at:
www.webattack.com
Click on FREEWARE at the top of the page, then look through the listings for REGISTRY TOOLS. Click on it. Scroll down until you find RegSeeker then download it.
After it's installed and the interface is open, click in FIND IN REGISTRY. In the box enter "tweakui" WITHOUT the quotation marks. Click on SEARCH.
Let the program scan the registry. By the time its finished, you should have at least one or two registry keys for Tweak UI. If you do, click on HIGHLIGHT ALL, then right-click your mouse and click on DELETE. The keys will disappear.
Don't worry. RegSeeker makes a back-up of everything it removes. You can restore the keys if need be.
Then, try everything in Windows Explorer--I assume that's where you found the .exe--to delete Tweak UI.
If I'm not here when you post back, someone else will pick up the thread.
Good luck, Solarian

This is the clue:
"WINDOWS\System32\TweakUI.exe\uninstall.hta"Check your Norton settings, you will see it alerts on hta files trying to perform a system activity (here deletion of files). This is because hta can contain malicious scripts.
So either disable Norton auto protect while you uninstall, or temporarily downrate the level of protection it is providing until you are done.

Problem solved and everything is running smoothly. Thanks for all the help, Solarian, and thank you, SafeTsurfa. I'm grateful.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |