Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

MSSE seems to have disappeared...


  • This topic is locked This topic is locked
14 replies to this topic

#1 Richard14

Richard14

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:13 PM

Posted 10 May 2013 - 11:54 PM

I noticed today that when i clicked on Microsot Security essentials icon nothing would happen.  When I checked the folder all the files seemed to just be shortcuts.   I can not update windows now.  I also can not download any files on this pc (I get a 'virus check failed' and the file is deleted.)   Not sure when this started.  I can get files using a separate laptop and transfer them.  I have disconnected this PC from the internet for now, and am posting from the laptop.  I had malwabytes anti malware on the pc so I had it update and do a full scan.It is running now.  I will save the log.

 

Awaiting instructions...

 

Thankyou

 

Richard

 

 



BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:05:13 AM

Posted 11 May 2013 - 12:37 AM

Hello -

First thing - Look in Programs to see if MSE is listed as installed, or look in Control Panel. Add Remove for XP or Programs and Features for Vista / 7

 

Next - Post that MBAM log file here when the scan is complete -

 

Thanks -



#3 Richard14

Richard14
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:13 PM

Posted 11 May 2013 - 07:28 AM

After over 1.5 hours I aborted the full scan. Here is the log from that one...

 

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.05.11.01

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Richard :: MAIN-PC [administrator]

5/10/2013 8:18:59 PM
mbam-log-2013-05-10 (20-18-59).txt

Scan type: Full scan (C:\|F:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 252679
Time elapsed: 1 hour(s), 39 minute(s), 53 second(s) [aborted]

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Users\Richard\AppData\Local\Temp\msimg32.dll (Trojan.FakeMS) -> Quarantined and deleted successfully.

(end)

 

 

I then did a quick scan...

 

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.05.11.01

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Richard :: MAIN-PC [administrator]

5/10/2013 9:59:46 PM
mbam-log-2013-05-10 (21-59-46).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 236752
Time elapsed: 5 minute(s), 36 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 1
HKCR\CLSID\{FBEB8A05-BEEE-4442-804E-409D6C4515E9}\InProcServer32| (Trojan.0Access) -> Bad: (C:\$Recycle.Bin\S-1-5-21-137111657-3113389662-2625091050-1000\$2f4763a998ef9c37b7dd655b9b529f62\n.) Good: (shell32.dll) -> Quarantined and repaired successfully.

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\$RECYCLE.BIN\S-1-5-21-137111657-3113389662-2625091050-1000\$2f4763a998ef9c37b7dd655b9b529f62\n (Trojan.0Access) -> Delete on reboot.

(end)

 

 

After that Malwarebytes quickscan was clean...

 

 

Microsoft Security Essentils shows in the Add/Remove programs, but when I click on it a window pops up saying "You do not have sufficient access to uninstall Microsoft Security Essentials.  Please contact your system administrator.

 

 

This is not a business, just a home PC.  I am logged in as administrator.

 

-Rich


Edited by Richard14, 11 May 2013 - 07:29 AM.


#4 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:05:13 AM

Posted 11 May 2013 - 08:39 AM

Hi -

You will find that the Quick Scan from Malwarebytes is usually enough to fix most problems.

(Trojan.0Access) noted in your Malwarebytes scan can be serious, but you may have caught it in time

 

Since you are having so many problems, I have included the Old and Newer versions of installing the M.S.E. program -

Official Solutions: Start Here - Continue until the program has been removed -
Microsoft has published a knowledgebase article for how to manually remove Microsoft Security Essentials version 2.x: http://support.microsoft.com/kb/2483120
Microsoft has developed a Fix-It for cleaning up/removing  Microsoft Security Essentials Version 1.x. More information here: http://support.microsoft.com/kb/2435760

 

The following was added 5/7/12 based on a reply from Support to address removal of MSE to resolve issues with a failed upgrade from 2.x to v4:
The following is the uninstall part of what MS Support provided when responding to an inquiry where uninstalling was a problem and our normally recommended procedures were not working.

 

Use the FixIt Tool to uninstall Microsoft Security Essentials.
This tool is designed to fix un-installation issues like, MSE registry issues, removes remnants of Microsoft Security Essentials from your computer.

Please use Internet Explorer browser for this if you can -

 

a. To do this run the FixIt tool from the following links.
b. Click the below link and select Run Now button.
http://support.microsoft.com/mats/Program_Install_and_Uninstall
c. After downloading and running for the first time
d. Select Run on small pop-up window and select Run on Internet Explorer-Security Warning Window.
e. Select Detect problems and let me select the files to apply.
f. Select Uninstalling.
g. After detecting problems Select Microsoft Security Client to uninstall and click Next.
h. Repeat the steps from b to f and, this time select Microsoft Antimalware from list to uninstall and click Next.

i. Reboot your computer and reinstall Microsoft Security Essentials from http://go.microsoft.com/fwlink/?LinkID=231276

 

I would also like you to install and run this small program, as it may help solve some issues.

Download Security Check by Screen317 from Here
* Save it to your Desktop.
* Double-click SecurityCheck.exe
* Follow the onscreen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt; please post the contents of that document.
Note: If a security program requests permission to access the Internet, allow it to do so.

 

Thank You -



#5 Richard14

Richard14
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:13 PM

Posted 11 May 2013 - 09:04 AM

The microsoft fixit tool failed to work.  When I click Run, the popup says the file has a virus and is deleted.

 

here is the log from Security Check

 

 Results of screen317's Security Check version 0.99.63 
 Windows Vista Service Pack 2 x86 (UAC is enabled) 
 Internet Explorer 9 
``````````````Antivirus/Firewall Check:``````````````
 WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
 WinPatrol
 Scholastic's I SPY Junior Puppet Playhouse
 Malwarebytes Anti-Malware version 1.75.0.1300 
 JavaFX 2.1.1   
 Java 7 Update 17 
 Java version out of Date!
 Google Chrome 26.0.1410.43 
 Google Chrome 26.0.1410.64 
 Google Chrome plugins... 
````````Process Check: objlist.exe by Laurent```````` 
 WinPatrol winpatrol.exe
 BillP Studios WinPatrol WinPatrol.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 0 %
````````````````````End of Log``````````````````````
 



#6 Richard14

Richard14
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:13 PM

Posted 11 May 2013 - 10:50 AM

I went back and found that the fix it program can be portable, so I was able to run it and it seems to have completely removed msse.



#7 Richard14

Richard14
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:13 PM

Posted 11 May 2013 - 12:39 PM

I downloaded and transferred the vista 32 bit installer to this computer but it ended with 'Cannot complete the Security Essentials installation'  Error code 0x80070645.


Edited by Richard14, 11 May 2013 - 12:39 PM.


#8 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:05:13 AM

Posted 11 May 2013 - 05:29 PM

Start with Problem with MSE error code 0x80070645

 

Then move to this if you still have problems I can't install Microsoft Security Essentials

Please check from this line ---->> Step 2: Ensure that the Windows Installer service is running
In Windows Vista, click Start. In the Start Search box, type services.msc, and then press Enter.
Then you should be able to use this area ------>> Step 4: Make sure you're installing the right version for your operating system

 

All Links are to direct M/soft advice

 

At this time it seems that you have no active Antivirus running -

 

Thank You -



#9 Richard14

Richard14
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:13 PM

Posted 11 May 2013 - 05:37 PM

OK, ill try your steps.   Is there more I can do also to make sure the Trojan.0Access

 is completely removed?  Rookkit programs? etc.

 

Thanks.



#10 Richard14

Richard14
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:13 PM

Posted 11 May 2013 - 06:06 PM

Ok, I tried all the steps.  Security Essentils still fails.  

 

-Rich



#11 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:05:13 AM

Posted 11 May 2013 - 06:18 PM

Please wait an hour or so, and I will check with the Experts -

 

Thank You -



#12 Richard14

Richard14
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:13 PM

Posted 11 May 2013 - 06:21 PM

OK, thanks.

 

-Rich



#13 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:05:13 AM

Posted 11 May 2013 - 08:07 PM

Hi again -
There are other checks and logs required, but I am not able to do them in this forum area.

I have been told that the topic should be in Malware Removal area, so I will leave these directions -

Please read the Preparation Guide and create any requested logs and other information asked for. Mainly DDS logs.

Then please open a new topic HERE , and call it along the lines of that "" you can not Uninstall or Install your Antivirus. "" and also mention that traces of Trojan.0Access were found on your computer.

One of the Malware Removal Experts will help you as soon as they become available, but please be patient as they are very busy.
Add this link http://www.bleepingcomputer.com/forums/t/494163/msse-seems-to-have-disappeared/#entry3047438 so they know what we have already done in this current topic.

Thank You -

 

P.S. Please tell me when you have posted the new topic, and ask any other quick questions that you still may have.
If you do not have further questions, just reply that you have posted and I will lock this topic to avoid any confusion.



#14 Richard14

Richard14
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:12:13 PM

Posted 11 May 2013 - 09:28 PM

 I have started a new topic as you said.

 

http://www.bleepingcomputer.com/forums/t/494269/havehad-trojan0access-can-reinstall-msse/

 

Thanks for your help.

 

-Rich



#15 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:05:13 AM

Posted 11 May 2013 - 09:36 PM

I will ask for this to be locked so that nobody confuses the 2 topics

 

Good Luck -






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users