A week ago I tried ThreatFire on my PC with Vista. I found that I don’t need TF and normally uninstalled it. Then, two days ago I used system restore and after that I saw TF folder in Program Files and the process TFService.exe in Task Manager. There are no traces of TF in Remove/Install and Revo Uninstaller. I can’t delete neither the folder nor the process. I tried to reinstall TF from the setup file but it refused because it says that I have the program installed and two instances are not allowed.
Please, help me to uninstall this “ghost”.
I’ll try to delete it’s folder using Sometimes, only using Unlocker (http://ccollomb.free.fr/unlocker/) or KillBox (http://killbox.net/).
Then I’ll try install again and run the uninstaller (or, better, Revo uninstaller).
You might consider, ‘undoing’ the system restore. Or using safe mode to delete any files or folders
Neither Unlocker nor KillBox could delete the file and the process. I am afraid of undoing the system restore (since that time I installed some programs) and don’t know for sure how to load Vista in safe mode.
SafeMode (repeatedly press F8 while booting):
http://support.microsoft.com/default.aspx?scid=kb;en-us;315222
Or download a freeware application to do so:
http://www.snapfiles.com/get/bootsafe.html
Also, for Unlocker, maybe you need to manually stop the service before trying to delete the file.
I have found the solution. First, I downloaded AnVir Task Manager and it could at the third attempt to kill the TF process. Then I reistalled TF and uninstalled it with Revo Uninstaller. No traces of TF left. 
Glad to know that AnVir shareware did the job of killing the process…
Won’t Process Explorer running elevated (UAC) do the same? ???
It isn’t shareware for those who speak Russian. ;D At http://www.anvir.net/ they distribute Russian version of Anvir as freeware.
Won't Process Explorer running elevated (UAC) do the same? ???Do you mean Vista's Task Manager? It couldn't kill that process.
Well, http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx running as administrator indeed.
just in additional I think this can be useful for similar problems:
There are a program called “srvinstw.exe” by Microsft that can help you to add and remove Windows Services. you can search it in Google and Download and Run it (it’s 87KB, no Installation needed.).
also this can help you to manage your windows services: http://support.microsoft.com/kb/251192
If it ThreadFire isn’t properly removed through Add/Remove, there is a utility availabe
from PCTools:
http://www.pctools.com/threatfire/answers/id/760/
For $59.95 I’ll pass.
I can get much better and cheaper function for Free elsewhere like Autoruns or WinPatrol.
Reading topics such as this make me glad I have instant system recovery programs installed. Just a simple reboot and it’s gone…
Thanks but Anvir is freeware for me.