Microsoft Antispyware

I've been using this software on my XP Pro SP1 box until it expired at the end of July. The replacement, Windows Defender, needs SP2.

As it was no longer working, (I assume, after expiry), I uninstalled it in the usual way. It appears that most stuff was removed but left some residual programs in the C:\Program Files\ MS AntiSpyware... folder.

So far, so good, but now, every time I boot up I get a message, via SpyBot, that a Registry entry referring to 'gcasServ' has changed. As far as I can see there is no program left of that name although there does seem to be a fair amount of residual MS AntiSpyware lurking in the Registry.


Is there any way to clean things up and remove all traces of MS AntiSpyware?

 

"...unistalled it the usual way..... "

And that was?

I have used Control Panel, Add/Remove programs and it cleaned everything.


In your situation, since only SpyBot complains, why not configure SpyBot to ignore the issue?

To those unsatsified with that workaround:

1. Use Explorer and remove the Windows Antispyware folder from \Program Files. Answer yes as to removing any files.

2. Download AutoRuns from Sysinternals/Microsoft: http://www.sysinternals.com/Utilities/Autoruns.html

Unpack and run the program. See if you see any entries that refer to the old MAS program. If so, remove them.

Reboot and test.

If there is still a message I will show you how to make a registry change to remove the error message.

 

The final answer was twofold.

Using SysInternals Autoruns showed no instance of MS Antipsyware but within SpyBot there was the opton to cancel 'Resident', (TeaTimer). Doing this and then re-invoking it appeared to clear the previous issues.

A final check with Registry Mechanic showed that there was an orphaned entry for gcasServ. Running Registry Mechanic fixed the issue and all has been well since.

Thanks for the input.

 

I would suggest using a registry cleaner and then delete the folder from the program section.
If not reinstall XP

 

"No Thread specified. If you followed a valid link, please notify the administrator "