Hi @tm_glenn,

Thanks for the answer!

So, there is an official way to close/uninstall the free on demand scanner?

The quick scan was already done (no threats found). But closing the software and deleting the free executable in the download folder leaves the temp data under appdata/local. And even after cleaning the temp file, some remnants temp file remain because that process (HouseCallX.exe) continue running from the temp folder even after the on demand scanner is closed and deleted.

Is it a question if time? Maybe a reboot is sufficient, but I continue to find strange that exiting, closing and deleting a one time scanner leaves a process open to use till 10% of the CPU from the temporary local folder...

Thanks again for your answer

Hi @forumtrendmicro,

When Trend Micro House Call starts, it'd also trigger HouseCallX in the background if users agree to have Trend Micro Smart Feedback Enabled.
 

 • HouseCallX process will be created with the low priority in the background.
 • HouseCall does not depend on the HouseCallX process, allowing HouseCallX to continue running even after HouseCall has completed.

Note: Trend Micro Smart Feedback sends real-time threat data to Trend Micro Smart Protection network for better security solutions.

To stop HouseCallX from running in the background after using HouseCall, follow these steps:

 1. On HouseCall, Click settings.
 2. Choose the Smart Feedback Tab.
 3. Uncheck the box next to "Turn on Trend Micro Smart Feedback"

Hope this helps! 

Hi @tm_darlene 

Thanks for you explanation. It was very clear!

@tm_glenn​ 

So, the OP said " HouseCallX  running after deletion" and you said that this is normal????

The OP used the TM Housecall  without installation , deleted it after usage and still had some processes left over running.

How is this normal????

@claudiubotezatu​ 

Yes, my initial feeling of uneasiness was exactly of something not normal. Because even after closing the main software window (housecal launcher 64) in the download folder, many different folders and temp files were still present.

Even after cleaning temporary files, one was not deleted and any attempt to erase it manually triggered a popup that a process belonging to the folder was still in use.

The task manager revealed that HouseCallX was still running and using both the CPU (between 2 an 12%) and the network.

Manually closing the process allowed me to manually erase the temp folder.

The only remnants were some temp cache files under C that contains system information, scanned elements and scanned registry.

From my understanding of the other comments, HouseCallX is created as a complete independent process running from a temp folder. So closing the main software and even deleting don't affect the temp files (and so the process) at all. It was not in the startup process list, so maybe a reboot and system cleaner might be get rid of it...

I used the default settings, so I think that by default the telemetry and and the smart feedback were on. Unchecking these options may be a solution, I cannot try it.

Personally, I like when thing are clearly exposed. So as a suggestion I think it will be beneficial to prompt the user when closing the main window if he/she want to close all the process reletad to the on demand scanner and the temporary files. Or even better, code the software to automatically close all the process and erase every temporary files and folders.

Ah, on another note. When searching for the reason of this behaviour, I found that this sandbox service listed the housecall launcher as malicious, basically for many different threats, from malware to keylogging and ramson.

https://www.joesandbox.com/analysis/250420/0/html

It is only that site so I believe (and hope) it is a false positive, because many different person suggest this scanner to me. Even in the Bleeping computers forum suggest the TrendMicro HouseCall...