cant start defender cant install MSE error code:0x8004FF91

[FOXEN]

hi i used a tool to remove Norton - have tried everything

cant start Defender and cant install MSE

looking for a specific fix to my issue

lap top is Sony VAIO E series

 

[cottonball]

FOXEN,

Let me see if I understand the issues...

You removed what, Norton AV?

As a result, now, Windows Defender does not start?

After removing Norton AV, you also are not able to install MSE?



One at a time..on Windows Defender:

1. Have you run services.msc, opened Services Manager, and see if the Windows Defenderservice is started and set to Automatic?

2. Did you check the Windows Management Instrumentation (WMI) repository?
It allows management information to be shared between management applications.

Restarting the WMI repository may help:

Open a Command Prompt (Start > All Programs >Accessories > Command Prompt), right-click, and select: Run as Administrator

Copy/paste the following (with the mouse) at the prompt, and press Enter:

winmgmt /verifyrepository

If you get a message “WMI repository is not consistent”, enter the following command at the prompt:

winmgmt /salvagerepository

This action performs a consistency check on the WMI repository.

Restart the computer and try enabling Windows Defender.

If you get the following message:

winmgmt /salvagerepository failed

Ignore the message, and once again run the following at the command prompt:

winmgmt /salvagerepository


Try Windows Defender again.

 

[FOXEN]

Hi thanks,

I let Norton 360 expire

I tried to start Windows Defender through services.msc as administrator and couldn't, it timed out and gave an error

I uninstalled N360

Tried to start Defender again without success

I used a tool to remove Norton / Symantec from my computer

Defender still wouldn't start

Realised MSE is what I wanted

Downloaded MSE but it wouldn't install and gave the error code above

I verified the repository at the command prompt as "consistent"

 

[Jacee]

1. Please download MGADiag[/url] and save it to your desktop.
2. Double click the
   
   icon on your desktop.
3. Push
   
4. Push
   
5. Go to Start -> Run and type in "Notepad"
6. Go to Edit -> Paste in notepad.
7. x out all of the numbers and letters in the line beginning with "Windows Product Key:"
8. Copy and paste that log here.

 

[cottonball]

Thanks for the info, FOXEN.

On: MSE error code:0x8004FF91 - it leads to believe that there are still remnants of your previous AV in the system. Somewhere in the computer, more than likely, there is a Registry key preventing the installation of MSE. This may occur when other security software is not fully removed.

Did you use the Norton Removal Tool to uninstall your Norton product?
https://support.norton.com/sp/en/us..._en_us?abproduct=home&abversion=1&pvid=f-home

BTW, does Windows Update work?

 

[FOXEN]

Thanks for the info, FOXEN.

On: MSE error code:0x8004FF91 - it leads to believe that there are still remnants of your previous AV in the system. Somewhere in the computer, more than likely, there is a Registry key preventing the installation of MSE. This may occur when other security software is not fully removed.

Did you use the Norton Removal Tool to uninstall your Norton product?
https://support.norton.com/sp/en/us..._en_us?abproduct=home&abversion=1&pvid=f-home

BTW, does Windows Update work?

Hi - yes i used that tool and it says update is working

 

[FOXEN]

1. Please download MGADiag[/url] and save it to your desktop.
2. Double click the
   
   icon on your desktop.
3. Push
   
4. Push
   
5. Go to Start -> Run and type in "Notepad"
6. Go to Edit -> Paste in notepad.
7. x out all of the numbers and letters in the line beginning with "Windows Product Key:"
8. Copy and paste that log here.

Hi thanks - the URL icon when downloaded onto my desktop had the chrome icon, does that matter?

Do i press the "continue" button in the newly opened page or in your original message?

I can't seem to produce any log that I can copy paste into a notepad??

And also Microsoft Support verified online that my windows copy is genuine and couldn't resolve the pop up issue that looks exactly like your MGA icon.

 

[FOXEN]

bump??

 

[cottonball]

Please do the following...

Download Security Check:
http://screen317.spywareinfoforum.org/
Save to your Desktop.
Double-click: SecurityCheck.exe
Follow the onscreen instructions inside the black box.

When done, a Notepad report opens automatically, called: checkup.txt

:ar: Without taking any corrective actions, please post the checkup.txt in your reply.

 

[FOXEN]

Please do the following...

Download Security Check:
http://screen317.spywareinfoforum.org/
Save to your Desktop.
Double-click: SecurityCheck.exe
Follow the onscreen instructions inside the black box.

When done, a Notepad report opens automatically, called: checkup.txt

:ar: Without taking any corrective actions, please post the checkup.txt in your reply.

Results of screen317's Security Check version 0.99.90
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 10 Out of date!
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
Java(TM) 6 Update 16
Java 7 Update 71
Adobe Flash Player 15.0.0.223
Adobe Reader XI
Google Chrome 37.0.2062.124 Google Chrome out of date!
````````Process Check: objlist.exe by Laurent````````
Microsoft Small Business Business Contact Manager BcmSqlStartupSvc.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 2%
````````````````````End of Log``````````````````````

 

[cottonball]

Thanks for the info!

Running your computer without an AV program is not good. It is like throwing a magnet in a bucket of nails.

For now, you may want to consider installing Panda Free AntiVirus. It is light on resources.
I have it installed, and have no problems. You do, on occasion, get a pop-up asking if you want to upgrade to the paid version. I always decline.

Download:
Best Free Antivirus Download | Panda Free Antivirus 2015

Also, please update the items identified in red as: out of date

Next, this tool has worked to identify problems with Windows Defender and MSE, so, please use the
following:
Farbar Recovery Scan Tool Download

Select the version that applies to your system: 64-bit

Save it to your Desktop.

Double-click the downloaded file to run it.
When the tool opens, click Yes to the disclaimer.
Press the Scan button.

When done, the tool makes a log, FRST.txt, in the same directory from which the tool is run (Desktop)

:ar: Please provide the FRST.txt in your reply.
The first time the tool is run, it also creates another log: Addition.txt
:ar: Also post the Addition.txt in your reply.

 

[FOXEN]

Thanks for the info!

Running your computer without an AV program is not good. It is like throwing a magnet in a bucket of nails.

For now, you may want to consider installing Panda Free AntiVirus. It is light on resources.
I have it installed, and have no problems. You do, on occasion, get a pop-up asking if you want to upgrade to the paid version. I always decline.

Download:
Best Free Antivirus Download | Panda Free Antivirus 2015

Also, please update the items identified in red as: out of date

Next, this tool has worked to identify problems with Windows Defender and MSE, so, please use the
following:
Farbar Recovery Scan Tool Download

Select the version that applies to your system: 64-bit

Save it to your Desktop.

Double-click the downloaded file to run it.
When the tool opens, click Yes to the disclaimer.
Press the Scan button.

When done, the tool makes a log, FRST.txt, in the same directory from which the tool is run (Desktop)

:ar: Please provide the FRST.txt in your reply.
The first time the tool is run, it also creates another log: Addition.txt
:ar: Also post the Addition.txt in your reply.

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

Hi, thanks. I tried to cut and paste but a 20000 character limit has me trying to upload the files - please let me know if this works.

 

[FOXEN]

Thanks for the info!

Running your computer without an AV program is not good. It is like throwing a magnet in a bucket of nails.

For now, you may want to consider installing Panda Free AntiVirus. It is light on resources.
I have it installed, and have no problems. You do, on occasion, get a pop-up asking if you want to upgrade to the paid version. I always decline.

Download:
Best Free Antivirus Download | Panda Free Antivirus 2015

Also, please update the items identified in red as: out of date

Next, this tool has worked to identify problems with Windows Defender and MSE, so, please use the
following:
Farbar Recovery Scan Tool Download

Select the version that applies to your system: 64-bit

Save it to your Desktop.

Double-click the downloaded file to run it.
When the tool opens, click Yes to the disclaimer.
Press the Scan button.

When done, the tool makes a log, FRST.txt, in the same directory from which the tool is run (Desktop)

:ar: Please provide the FRST.txt in your reply.
The first time the tool is run, it also creates another log: Addition.txt
:ar: Also post the Addition.txt in your reply.

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

Hi, thanks. I tried to cut and paste but a 20000 character limit has me trying to upload the files - please let me know if this works.

attached

 

[cottonball]

FOXEN,

Thanks for providing the reports.

As suspected, there are remnants of Norton presented in the reports.

There are no issues reported with Windows Defender or Microsoft Security Essentials.

Will take a look at the reports once again, and prepare a script to remove some items. However, even doing this may not open the door for WD and MSE to work on this machine. There may be Registry entries or some file that still remains in the system. These issues are very difficult to resolve.

If in the end nothing works, there are alternatives to MSE and WD.

Thanks for your patience.

 

[FOXEN]

ok thanks

 

[cottonball]

FOXEN,

Please open Notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the code box below (Do not copy the word 'code') to Notepad.
Save it to the Desktop, and name it: fixlist.txt

start
CloseProcesses:
CHR Extension: (Norton Identity Safe) - C:\Users\Fiona Hekking\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-09-17]
2014-11-18 08:39 - 2014-11-18 08:39 - 00896048 _____ () C:\Users\Fiona Hekking\Desktop\Norton_Removal_Tool.exe
2014-11-17 15:16 - 2014-11-17 15:16 - 00896048 _____ () C:\Users\Fiona Hekking\Downloads\Norton_Removal_Tool.exe
2014-11-12 11:28 - 2014-11-12 11:29 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-11-17 15:17 - 2010-07-01 14:03 - 00000000 ____D () C:\ProgramData\Norton
2014-11-12 11:29 - 2012-07-12 03:21 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
Task: {47656CF7-4374-49FA-AF6F-6801B8865EB3} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\WSCStub.exe
C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\WSCStub.exe
Task: {B4A27595-9969-4F8B-80D8-8A721A10FAA6} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
Task: {CB42DF1F-ADE5-4C2A-826C-B2387F1BBC72} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe
EmptyTemp:
end

NOTICE: This script is written specifically for this computer!!!
Running this on another computer may cause damage to the Operating System.

Now, please run FRST or FRST64, and press the Fix button, just once, and wait.

If the tool needs a reboot, please let the system do so normally. After that let the tool complete its run.

When done, the tool creates a report on the Desktop called: Fixlog.txt

:ar: Please post the Fixlog.txt in your reply.


Thanks!

 

[FOXEN]

thanks but Panda wont let me run FRST?

 

[FOXEN]

no wait, have asked Panda to restore FRST, will run and fix now....

 

[FOXEN]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 22-11-2014 01
Ran by Fiona Hekking at 2014-11-23 22:00:51 Run:1
Running from C:\Users\Fiona Hekking\Desktop
Loaded Profile: Fiona Hekking (Available profiles: Fiona Hekking & Earl Hekking & kids & Guest)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
CloseProcesses:
CHR Extension: (Norton Identity Safe) - C:\Users\Fiona Hekking\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-09-17]
2014-11-18 08:39 - 2014-11-18 08:39 - 00896048 _____ () C:\Users\Fiona Hekking\Desktop\Norton_Removal_Tool.exe
2014-11-17 15:16 - 2014-11-17 15:16 - 00896048 _____ () C:\Users\Fiona Hekking\Downloads\Norton_Removal_Tool.exe
2014-11-12 11:28 - 2014-11-12 11:29 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-11-17 15:17 - 2010-07-01 14:03 - 00000000 ____D () C:\ProgramData\Norton
2014-11-12 11:29 - 2012-07-12 03:21 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
Task: {47656CF7-4374-49FA-AF6F-6801B8865EB3} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\WSCStub.exe
C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\WSCStub.exe
Task: {B4A27595-9969-4F8B-80D8-8A721A10FAA6} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
Task: {CB42DF1F-ADE5-4C2A-826C-B2387F1BBC72} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe
EmptyTemp:
end
*****************

Processes closed successfully.
C:\Users\Fiona Hekking\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif => Moved successfully.
C:\Users\Fiona Hekking\Desktop\Norton_Removal_Tool.exe => Moved successfully.
C:\Users\Fiona Hekking\Downloads\Norton_Removal_Tool.exe => Moved successfully.
C:\Windows\System32\Tasks\Norton 360 => Moved successfully.
C:\ProgramData\Norton => Moved successfully.
C:\Windows\System32\Tasks\Norton WSC Integration => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{47656CF7-4374-49FA-AF6F-6801B8865EB3}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{47656CF7-4374-49FA-AF6F-6801B8865EB3}" => Key deleted successfully.
C:\Windows\System32\Tasks\Norton WSC Integration not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton WSC Integration" => Key deleted successfully.
"C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\WSCStub.exe" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B4A27595-9969-4F8B-80D8-8A721A10FAA6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B4A27595-9969-4F8B-80D8-8A721A10FAA6}" => Key deleted successfully.
C:\Windows\System32\Tasks\Norton 360\Norton Error Analyzer not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton 360\Norton Error Analyzer" => Key deleted successfully.
"C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CB42DF1F-ADE5-4C2A-826C-B2387F1BBC72}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CB42DF1F-ADE5-4C2A-826C-B2387F1BBC72}" => Key deleted successfully.
C:\Windows\System32\Tasks\Norton 360\Norton Error Processor not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton 360\Norton Error Processor" => Key deleted successfully.
"C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe" => File/Directory not found.
MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED => Error: No automatic fix found for this entry.
"C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" => File/Directory not found.
EmptyTemp: => Removed 789.9 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====

 

[cottonball]

Good job!

My bad!!

Should have also removed the following with the fixlist, so please run the following using the fixlist procedure (Post #16}, but with the following info:

start
CloseProcesses:
C:\Users\Fiona Hekking\Downloads\mseinstall (5).exe
2014-11-17 15:37 - 2014-11-17 15:37 - 14087848 _____ (Microsoft Corporation) C:\Users\Fiona Hekking\Downloads\mseinstall (4).exe
2014-11-17 15:18 - 2014-11-17 15:19 - 14087848 _____ (Microsoft Corporation) C:\Users\Fiona Hekking\Downloads\mseinstall (3).exe
2014-11-17 15:04 - 2014-11-17 15:04 - 14087848 _____ (Microsoft Corporation) C:\Users\Fiona Hekking\Downloads\MSEInstall (2).exe
2014-11-17 14:45 - 2014-11-17 14:45 - 14087848 _____ (Microsoft Corporation) C:\Users\Fiona Hekking\Downloads\MSEInstall (1).exe
2014-11-12 12:33 - 2014-11-12 12:33 - 14087848 _____ (Microsoft Corporation) C:\Users\Fiona Hekking\Downloads\mseinstall.exe
end

Please post the results, and then download a new MSE installer, and try it, but first make sure you disable Panda!