f.lux auto-uninstalls after install
-
Is there a way to disable Webroot? Would like to know if it's the cause!
That "map" window uses an IE window, so anything that affects the browser could be related. -
I have the exact same problem. I have tried v3 and v4, and both install very quickly, then disappear before I can enter zip code. On the task bar I can see the f.lux icon disappear. Then if I click the newly created shortcut in the programs menu, it says the shortcut leads to a non-existent file.
There was a period of time I used the app without problem, then one day it randomly wouldn't work and I could never reinstall it again.
My stats:
Operating System
Windows 7 Home Premium 64-bit
CPU
Intel Core i7 740QM @ 1.73GHz 56 °C
Clarksfield 45nm Technology
RAM
6.00GB Dual-Channel DDR3 @ 664MHz (9-9-9-24)
Motherboard
Sony Corporation VAIO (N/A)
Graphics
Nvidia Defaul (1920x1080@59Hz)
1023MB NVIDIA GeForce GT 425M (Sony) 44 °C
Storage
465GB Seagate ST9500420AS (SATA) 35 °C -
Can you please post any anti-virus software you might have?
f.lux usually doesn't try to uninstall itself..... ;) -
@herf I'm unable to disable Webroot due to group policies. I probably could have it disabled but that would take an act of congress. I also have a laptop with Win 10 Pro and Webroot and f.lux works just fine on it. It's on the same domain as my PC and is managed by the same group policies so I don't think Webroot is the cause. Given my situation, disabling Webroot will be my last resort...
-
Does webroot leave any logs behind?
(It is very unusual for an EXE to disappear without antivirus. We certainly never would delete our own app.)
We are still scanning totally clean on virus total:
https://www.virustotal.com/en/file/33c38e32739642e3dc9ecae3fba9266fea6242c937ab5133bcda75af5127537e/analysis/1503364137/ -
As far as I can tell, I am running only Microsoft security essentials and Spybot Search and destory.
I opened the install directory (appdata/local/fluxsoftware/flux) and then ran the installer again. Same thing, the app launched, then disappeared like before. But in the install directory, I could see these files and folders: medial, runtime, flux.exe, and uninstall. After the app shutdown I looked in the install folder and about three seconds later flux.exe disappeared from the folder leaving the two folders and uninstall. The uninstaller works, btw, when clicked.
Edit: I uninstalled spybot, and tried again with the same result. I also disabled live protection for microsoft security essentials, all with the same result.
-
Can you try one of these ideas to see which process is deleting f.lux?
https://serverfault.com/questions/458120/exe-files-being-deleted
-
I gave the process monitor a try. I filtered on activity inthe Flux install directory, and any Delete events. Here are screenshots of the results when attempting to install flux4.
-
I do not have any of the "prey" activity. Assume you are running https://www.preyproject.com/?
More worrisome is that regsvr32.exe seems to be actually deleting f.lux, which I've never seen before. This may be a malware version of regsvr32.exe.
Can you get a different Antivirus and see if it can help?
-
I didn't know how to read the report, so thank you on that front. I will definitely try a different malware/antivirus software!
-
I've run some malware scans. Microsoft security essentials comes up with nothing. Spybot S&D found a few tracking cookies. I'm currently running a scan with zemana anti malware, and it flags rgsvr32.exe as a "hollow process". When the scan is done I'll clean it and try installing flux again.
EDIT: update. i finished the Zemana scan, cleaned the defective files and I have successfully installed F.lux. I ran the process monitor during this install, and the delete events did not occur. Thank you for your help! I never would have gotten flux working, or found this bit of malware, without your help!
-
@aniMattor :) :) :)
-
I downloaded and tried Zemana as well but my problem persists. I'll see if I can disable Webroot and try again...
-
@jwsl1200mk2 you could try procmon too - it is not that hard to do... :)
