Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Microsoft Security Essentials

05 Apr 2015   #1
Slipperyfox

Windows 7 Professional x64
 
 
Microsoft Security Essentials

I am having no end of trouble trying to get rid of this program. I have been reading for the last 2 days and still unable to get rid of.
I am running Windows 7 Home Premium 4 gig ram

Things I have tried are:
  • Tried to reinstall the application when I try that I get an error and am Installing as Admin
  • Tried Microsoft Fix it 50535. No Good get an error code 2203 (installer has encountered and expected error installing this package. This may indicate a problem with this package.) I get this error with any application I try and install
  • Tried Microsoft Fix it Program Install and Uninstall. Ran manually and auto and same outcome.<LI xzf9="1">Tried to delete in regedit and tells me Can not delete error with keys
  • Have ran batch file and get the following

Code:
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{6D02ECF8-54B0-4A34-9CB9-40383BDC2AE9}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{6D4026D4-8F72-4ECF-B51A-5A7C22F7559F}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{882741A4-4C85-45B5-A253-7B36E5534C07}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{88A3C23C-E988-46E8-842A-0D336BD91EF5}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{974F27A9-BF40-4791-AC27-37651AC66CB2}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{B160CEFE-EF40-4C56-B144-8C5C9C7BDE13}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{B4FAD909-AC6E-4327-98C2-ED2B0BA62CF6}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{BE43EAEF-E050-4445-8975-A9606F22F5CB}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{C1824DD3-9ABB-42D2-94F4-D82EBF5B1699}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{CE3554D6-D70F-42D8-AD31-61F26DAD266D}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{E43C38D2-DE17-49F4-8D86-EE03A7890016}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{E7AE8BE6-F1D7-4B93-A42A-D8E94AEB12D5}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{FFCAE988-81B9-43B8-A564-CBA57A2C20CF}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Store\67EB0C947CCA3515E63DF6D4A672720F" now owned by the administra
tors group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\1" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\2" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\3" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\4" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\1\0000000000000000.idx" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\2\0000000000000000.idx" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\3\0000000000000000.idx" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\4\0000000000000000.idx" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\RtSigs\Data" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
upport\MPDetection-04042015-191606.log" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
upport\MPLog-03032015-112904.log" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
upport\MpWppTracing-04052015-153345-00000003-ffffffff.bin" now owned by the admi
nistrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
upport\MpWppTracing-04052015-153511-00000003-ffffffff.bin" now owned by the admi
nistrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
upport\MpWppTracing-04052015-154343-00000003-ffffffff.bin" now owned by the admi
nistrators group.
C:\Program Files\Microsoft Security Client>takeown /f "C:\ProgramData\Microsoft\
Microsoft Security Client" /a /r
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Security Clie
nt" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Security Clie
nt\Support" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Security Clie
nt\Support\EppSetup.etl" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Security Clie
nt\Support\EppSetup.log" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Security Clie
nt\Support\EppSetupResult.ini" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Security Clie
nt\Support\MSSecurityClient_Setup_4.7.205.0_epp_Install.log" now owned by the ad
ministrators group.
C:\Program Files\Microsoft Security Client>takeown /f "C:\Program Files\Microsof
t Security Client" /a /r
ERROR: Access is denied.
C:\Program Files\Microsoft Security Client>REM Delete the MSE folders.
C:\Program Files\Microsoft Security Client>rmdir /s /q "C:\ProgramData\Microsoft
\Microsoft Antimalware"
C:\ProgramData\Microsoft\Microsoft Antimalware\DEFINI~1\{4C159~1\mpengine.dll -
Access is denied.
C:\ProgramData\Microsoft\Microsoft Antimalware\IMpServiceEDB4FA23-53B8-4AFA-8C5D
-99752CCA7094.lock - The process cannot access the file because it is being used
by another process.
C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\CACHEM~1\MpScanCach
e-1.bin - The process cannot access the file because it is being used by another
process.
C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\MpDiag.bin - The process ca
nnot access the file because it is being used by another process.
C:\ProgramData\Microsoft\Microsoft Antimalware\Support\MPDetection-04042015-1916
06.log - The process cannot access the file because it is being used by another
process.
C:\ProgramData\Microsoft\Microsoft Antimalware\Support\MPLog-03032015-112904.log
- The process cannot access the file because it is being used by another proces
s.
C:\Program Files\Microsoft Security Client>rmdir /s /q "C:\ProgramData\Microsoft
\Microsoft Security Client"
C:\Program Files\Microsoft Security Client>rmdir /s /q "C:\Program Files\Microso
ft Security Client"
C:\Program Files\Microsoft Security Client\DbgHelp.dll - Access is denied.
C:\Program Files\Microsoft Security Client\EppManifest.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MpAsDesc.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MpClient.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MpCmdRun.exe - Access is denied.
C:\Program Files\Microsoft Security Client\MpCommu.dll - Access is denied.
C:\Program Files\Microsoft Security Client\mpevmsg.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MpOAv.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MpRTP.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MpSvc.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MSESysprep.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MsMpCom.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MsMpEng.exe - Access is denied.
C:\Program Files\Microsoft Security Client\MsMpLics.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MsMpRes.dll - Access is denied.
C:\Program Files\Microsoft Security Client\msseces.exe - Access is denied.
C:\Program Files\Microsoft Security Client\msseoobe.exe - Access is denied.
C:\Program Files\Microsoft Security Client\msseooberes.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MsseWat.dll - Access is denied.
C:\Program Files\Microsoft Security Client\NisIpsPlugin.dll - Access is denied.
C:\Program Files\Microsoft Security Client\NisLog.dll - Access is denied.
C:\Program Files\Microsoft Security Client\NisSrv.exe - Access is denied.
C:\Program Files\Microsoft Security Client\NisWFP.dll - Access is denied.
C:\Program Files\Microsoft Security Client\Setup.exe - Access is denied.
C:\Program Files\Microsoft Security Client\SetupRes.dll - Access is denied.
C:\Program Files\Microsoft Security Client\shellext.dll - Access is denied.
C:\Program Files\Microsoft Security Client\SqmApi.dll - Access is denied.
C:\Program Files\Microsoft Security Client\SymSrv.dll - Access is denied.
C:\Program Files\Microsoft Security Client\SymSrv.yes - Access is denied.
The process cannot access the file because it is being used by another process.
C:\Program Files\Microsoft Security Client>REM Stop the WMI and its dependency s
ervices
C:\Program Files\Microsoft Security Client>sc stop sharedaccess
[SC] ControlService FAILED 1062:
The service has not been started.
 
C:\Program Files\Microsoft Security Client>sc stop MpsSvc
SERVICE_NAME: MpsSvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 3 STOP_PENDING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x7530
C:\Program Files\Microsoft Security Client>sc stop wscsvc
SERVICE_NAME: wscsvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 3 STOP_PENDING
(STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
C:\Program Files\Microsoft Security Client>sc stop iphlpsvc
SERVICE_NAME: iphlpsvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 3 STOP_PENDING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x7530
C:\Program Files\Microsoft Security Client>sc stop winmgmt
[SC] ControlService FAILED 1051:
A stop control has been sent to a service that other running services are depend
ent on.
 
C:\Program Files\Microsoft Security Client>REM Delete the Repository folder.
C:\Program Files\Microsoft Security Client>rmdir /s /q "C:\Windows\System32\wbem
\Repository"
C:\Windows\System32\wbem\Repository\INDEX.BTR - The process cannot access the fi
le because it is being used by another process.
C:\Windows\System32\wbem\Repository\MAPPING1.MAP - The process cannot access the
file because it is being used by another process.
C:\Windows\System32\wbem\Repository\MAPPING2.MAP - The process cannot access the
file because it is being used by another process.
C:\Windows\System32\wbem\Repository\MAPPING3.MAP - The process cannot access the
file because it is being used by another process.
C:\Windows\System32\wbem\Repository\OBJECTS.DATA - The process cannot access the
file because it is being used by another process.
C:\Program Files\Microsoft Security Client>sc stop
DESCRIPTION:
Sends a STOP control request to a service.
USAGE:
sc <server> stop [service name] <reason> <comment>
<reason> = Optional reason code number for service stop
formed with the following elements in the format:
Flag:Major reason:Minor reason
[E.g., 1:2:8 means Hardware: Disk (Unplanned)]
Flag Major reason
------------------ ---------------------------
1 - Unplanned 1 - Other
2 - Custom 2 - Hardware
4 - Planned 3 - Operating System
4 - Software
5 - Application
64-255 - Custom
Minor reason
-----------------------------------
1 - Other
2 - Maintenance
3 - Installation
4 - Upgrade
5 - Reconfiguration
6 - Hung
7 - Unstable
8 - Disk
9 - Network Card
10 - Environment
11 - Hardware Driver
12 - Other Driver
13 - Service Pack
14 - Software Update
15 - Security Fix
16 - Security
17 - Network Connectivity
18 - WMI
19 - Service Pack Uninstall
20 - Software Update Uninstall
22 - Security Fix Uninstall
23 - MMC
256-65535 - Custom
<comment> = Optional comment for the reason above (127 characters maximum
)
C:\Program Files\Microsoft Security Client>PAUSE
Press any key to continue . . .
I have deleted the folder out of the %temp% as well as in the %Appdata%. In Program dir I still have
a folder Microsoft Security Client. In the Programdata under Microsoft I have Microsoft Antimalware and Microsoft Security Essentials and unable to delete any of them.
I am unable to stop the service running MSMPSVC with "TaskKill" using both the name and PID
When I go into Services I am unable to change the Start-up type is on auto and unable to Stop or Pause as well.

Can someone please help out. I hoping there is an easy fix so I don't have to rebuild.
Thanks in advance


My System SpecsSystem Spec
.
05 Apr 2015   #2
1PW

 
 

Hello Slipperyfox:

You do not need to uninstall MSE. Any truly top rated successor antivirus application will simply disable MSE during its installation phase. You will receive the heartfelt recommendations Ad nauseam as to which your upgraded AV should be. Ultimately the choice is yours. Do your homework and you should be pleased with the outcome.

Cheers
My System SpecsSystem Spec
05 Apr 2015   #3
ThrashZone

Win-7-Pro64bit 7-H-Prem-64bit
 
 

Hi see if Noel's post helps,
Need Someone to take a look at my .CBS Files.

As far as another a-v disabling MSE I doubt that they would however disable windows defender which is already disabled by MSE.
My System SpecsSystem Spec
.

05 Apr 2015   #4
MoxieMomma

OEM Windows 7 Ult (x64) SP1
 
 

Hi:

Quote   Quote: Originally Posted by 1PW View Post
You do not need to uninstall MSE. Any truly top rated successor antivirus application will simply disable MSE during its installation phase.
That may be a bit of an over-generalization?

For Kaspersky products, as an example, it is in fact always strongly recommended that other AVs be cleanly and thoroughly uninstalled prior to installing, using the vendor's removal tool, if available.

If the user does not do so, KIS/KAV/PURE/KTS will automatically attempt to remove (rather than disable) MSE and a host of other incompatible applications during its installation, as listed here (certain others must be removed manually).
If the existing AV installation is corrupted or broken, then KIS/KAV/PURE/KTS may have trouble uninstalling it, and that could lead to a KIS/KAV/PURE/KTS install failure.
Even if the install succeeds, Kaspersky products, as well as many other security products, can be finicky about leftover drivers and other remnants of other security products.


Cheers,
My System SpecsSystem Spec
05 Apr 2015   #5
Slipperyfox

Windows 7 Professional x64
 
 

I ended up finding another tread and put me onto PSexec and this then worked kind of.
Can&#39;t delete registry key - Microsoft Community

https://technet.microsoft.com/en-us/.../bb897553.aspx
I ran the regedit using PSexec with the command and manage to delete all relations to Microsoft Security Essentials, Microsoft Security Centre, and tried to delete MsMpSvc but wouldnt let me but deleted the ones I could.
I then booted into Safe Mode and deleted the folders in Program folder, Program(x86) and Programdata, then rebooted and problem fixed. It still shows in Services but not turned On. I then was able to install ESet and Malware protection. I also used the program Hitman Pro.
My System SpecsSystem Spec
Reply

 Microsoft Security Essentials




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
AVG 9 Internet Security v Microsoft Security Essentials
Which is better? I have AVG 9 til 2018, full version, but I'm considering MSE. Which is better? Which do you use?
System Security
Is Microsoft Security Essentials and Windows Firewall enough Security?
Is the above enough security or should I be going for an anti-virus program as well?
System Security
microsoft security essentials
i was wondering how good this program is and how it compares to norton...thx
System Security
Microsoft Security Essentials
I have just found this article relating valuable information about MSE; installation, features and a review. It should be of interest to all who use MSE and those thinking about switching....
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:14.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App