tahoma

Hi, it's me, computrace hater. If anyone cares, I solved my problem with UEFI boot. But I can't be sure, maybe it's now running in firmware and I made everything worse (i'm somewhat paranoid about uefi)

You need to disable the feature in BIOS and then remove the Agent from the system. Once deactivated it won't download it again.

Maybe I'm doing something wrong, but nothing helps. By Agent you mean 4 files (rpcnet{,p}.{exe,dll})? Removing files and services in registry - does not work. Creating empty files and setting "deny all to everyone" permissions, also in registry - does not work. It still executes (on every second reboot), although after that it does not create suspended iexplore.exe process every 15 minutes or so.

Maybe clearing CMOS will help, but the battery is under heatpipes, so I won't try it soon.

I have also already disabled it by default on all my Haswell Mods and will do so in future versions for the older models.

I guess I'll wait for that, thanks. By the way, 1.02.17 for W150ER/W170ER is on clevo mirror.

But I can't really remove a feature entirely that people paid for just because there is a "theoretical" way to exploit it to remote wipe the system etc...

Some people paid for it and use it... and for others it's just running anyway, not doing any good but still messing with system, with no easy way to disable. What a nice feature.

Just disable Anti Theft if you don't want to use it...

The first thing I tried, didn't help. And many people complain about the same, once it's activated it can't be deactvated.. for now I just added a string in hosts so it can't download its main files, but some bios code modifying NTFS partition sounds a bit scary..

Prema, can you remove the computrace rootkit? It was in my W170ER and apparently it's in the mod too. I never used it, and even if I wanted I have no idea how to. rpcnetp just keeps appearing and it's a security hole.