Cannot uninstall this Software/Driver: Invisibility Ltd (WinUSB) AndroidUsbDeviceClass

jkteddy77

Honorable
Jun 13, 2013
1,131
0
11,360
So I don't know at what point this program was installed, but i already uninstalled the device (it was in hidden devices under Other Devices in device manager (i think that's its category. it showed the same icon as Software Devices, only it had an question mark in the corner)

I'm trying to get rid of:
Windows Driver Package - Invisibility Ltd (WinUSB) AndroidUsbDeviceClass (08/27/2012)

It won't uninstall. When I uninstalled the device/driver AndroidUSBDeviceClass from the not installed drivers (or whatever it is called, icon was same as Software Devices but with a question mark) from the device manager, I don't think I selected the box to "delete driver software for this device". (or if I even had the option)
I also uninstalled a device called "CDCserial" at the same time. It seemed to be tied to the same driver package. Wish I could remeber more details.

Notice that I had to manually uninstall the drivers from the Device Manager AFTER I had manually uninstalled the troubling program from the control Panel. It is seemingly not doing anything when i try to uninstall it. It just says "Are you sure you want to remove this driver" in a small generic window. Even if I hit yes, the windows just closes, nothing happens, and the name is still in the list...

This program/driver seems malicious to me, and I cannot find much about it online. It isn't the generic Samsung driver that my phone uses in the device manager, and I have no clue when this got picked up on my PC.

The same day these drivers were installed so was this odd Jwrapper - Recordable Activator program i found in my program files. Prepared for what I knew would happen, I ran its install folder, only for my Antivirus to quickly stop it and wipe the trojans it just installed on my computer....
Well, turns out this program was also by invisibility ltd...
here is a summary from software informer: http://invisibility-ltd.android.informer.com/
It's apparently a legit company that makes screen recording apps, but I never manually installed this program, and it was picked up as a trojan... I also uninstalled USB Debugger, which was installed when I plugged in my Samsung S5 one time automatically. it was published by Limited ltd too, but it uninstalled fine and disappeared from my programs list.

How can I ensure it is properly uninstalled, and all of its drivers and data are gone as well?
Is it really already gone, and just stuck in the program list? how can I be sure? Can I find this and its data out in the registry somewhere?

EDIT: I found a clue. Someone used a HDD scanning backup tool that logged where all of there programs are. I found this while googling this driver's name. they happened to have this particular program too, and it picked this up:
Windows Driver Package - Invisibility Ltd (WinUSB) AndroidUsbDeviceClass (08/27/2012 7.0.0000.00005) (HKLM\...\75C08D52970A346B942241A586E034CE1ED766DE) (Version: 08/27/2012 7.0.0000.00005 - Invisibility Ltd)
so, that is the same product version as mine, but it didn't like a full registry location, just the shortened location i bolded. I search my registry for the string of digits, it said it was finished searching, but it didn't take me to anything... how else can I locate this?
 

Reyaz123

Admirable
Run a virus scan using malwarebytes while booting with "Safe mode with networking", hopefully that is more effective at removing that virus.

Edit: Go into your C: drive, check your program files folders, and locate folders inside that you notice are associated with that invisibility company. Delete them too.
 

jkteddy77

Honorable
Jun 13, 2013
1,131
0
11,360


Done and done, those were the first things I did. I couldn't find any program files, even hidden ones, associated with it, even in the registry.

Not sure how else to track it down :/
Any viruses were removed, but the software is still there, and will not go away.

EDIT: on one last sweepthrough, I noticed a folder named DIFX in my C:/program files.
It was created the same ate the driver was installed. All it had in it was a single config text file (you know, notebook paper icon with a gear next to it).
I deleted it, and sure enough, the program now says that the installer has been misplaced when I try to remove it. I think this may be a case of a poor uninstaller not doing its own job. I didn't take the chance of putting it back, as running the uninstaller won't change anything else. I didn't find any more DIFX folders in any local, roaming, or program files/data, so I am going to have to live with this being as clean as I can get it. Malware Bytes and Webroot found nothing malicious or thratening/
I am going to have to remove the program manually from the Control Panel using CCleaner to remove its registry entry. If there's a few residual files, oh well, there is no other way I can find them if the uninstaller doesn't do it, and I've tracked down every traceable file I can.
I think the situation is fixed, unless you have any other ideas of what else I could do to track Leftovers down.
Thanks for the suggestions!
 

jkteddy77

Honorable
Jun 13, 2013
1,131
0
11,360


Yeah :/
Thing is, it wasn't causing harm, just I didn't want it there. It was messing with other drivers and things.
It said installed 1-29-15... but I don't think they were installed until 5-11-15 when I last plugged my phone in.
That is usually my first course of action, but I'd done several updates and etc. before I noticed it there, and the backups were too far past to be worth it.
 
start cmd.exe as an admin, then run
pnputil.exe -e

it will produce a list of driver packages, find the one you want to remove, look at the file name something like oemxxx.inf then use the command
pnputil.exe -f -d oemxxx.inf

you should reboot and run the pnptuil.exe -e to confirm that the package is gone from your system.

 

jkteddy77

Honorable
Jun 13, 2013
1,131
0
11,360


Hmm, every driver was either for my printer, Razer keyboard, Microsoft keyboard, logitech mouse, or official samsung driver (modem, usb, and portable device driver)
I didn't see anything from invisibility ltd, so I'm assuming it is gone. I uninstalled the driver from my Device Manager, and I'm assuming thats all the control panel uninstaller for the program was trying to do as well. The driver is gone, but it's hard for me to tell if there are residual files or registry entries left over. I cannot find anymore in my program files, so assume it's as clean as I can get it.

Great command, I'll have to remember it. That'll come in handy in the future I'm sure.
 
this command is useful for looking for drivers that are installed.

start cmd.exe as an admin then run
driverquery.exe -v >mydriverlist.txt
notepad mydriverlist.txt

then use notepad to search the file for the driver.
the -v option is for verbose mode.



 

jkteddy77

Honorable
Jun 13, 2013
1,131
0
11,360


Hmm, that's a good list too.
I still don't see anything by Invisibilit ltd. or any other odd usb/android drivers.
I think it may be gone, or at least windows thinks it is.