Microsoft Security Essentials Problem

brato92,

Please go to the Farbar Recovery Scan Tool Download
Select the 64-bit version.
Save it to your Desktop.
Double-click the downloaded file to run it.

When the tool opens click Yes to the disclaimer.
Press the Scan button.

FRST64 makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).

Please provide the FRST.txt in your reply. <<---
The first time the tool is run, it also makes another log: Addition.txt
Also post the: Addition.txt in your reply. <<---


~~~~
Next, download Farbar Service Scanner

Save to the Desktop

• Make sure the following options are checked:
  
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center
  • Windows Update
  • Windows Defender
• Press: Scan
• FSS creates a log, FSS.txt, on the Desktop.

Please provide the FSS.txt in your reply.

brato92 can you run the tool below

Please download MGADiag and save it to your desktop.

Double click icon on your desktop.

Click on the button

Click on the button

Paste the log inside the box . Highlight all of the text then code wrap by pressing on the # icon on the top .

bravo92

You do have ZeroAccess . I will let cottonball help you out . Regarding the MGADiag looks legit to me .

brato92,

My apology for the delay!!

Will be working on your issue this evening, and will reply o/a 6:00AM your time (Romania).
We have an 8 hour time difference)

Thanks for your patience.

brato92,

Please do the following...

Open Notepad (Start > All Programs > Accessories > Notepad)
Copy/paste all the contents of the quote box below to Notepad (do not copy the word 'Quote').
Save it on the Desktop as: fixlist.txt

start
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] ATTENTION! ====> ZeroAccess
HKLM-x32\...\Run: [] [x]
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
Handler: msdaipp - No CLSID Value -
Handler-x32: msdaipp - No CLSID Value -
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
C:\$Recycle.Bin\S-1-5-18\$b44b7fef6f96a8643f5b45956d5cbc4c
C:\$Recycle.Bin\S-1-5-21-917525429-2300147935-38172813-1000\$b44b7fef6f96a8643f5b45956d5cbc4c
C:\$Recycle.Bin\S-1-5-18\$b44b7fef6f96a8643f5b45956d5cbc4c
end

WARNING: This script is written specifically for brato92, for use on this particular computer.
Running the script on another computer may cause damage to the Operating System!!

Run FRST again, but this time press the Fix button just once, and wait.

FRST should reboot once to finish removing ZeroAccess.

When done, the tool makes a log on the Desktp.
This time it is called: Fixlog.txt

Please post Fixlog.txt in your reply.

brato92,


Open Notepad (Start > All Programs > Accessories > Notepad)
Copy/paste all the contents of the quote box below to Notepad (do not copy the word 'Quote').
Save it on the Desktop as: fixlist.txt

Quote:
start
DeleteJunctionsIndirectory: C:\Program Files\Windows Defender
end

Run FRST64 again (from the Desktop), but this time press the Fix button just once, and wait.
When done, the tool makes a log on the Desktop.
Please post Fixlog.txt in your reply.


Since the following steps involve editing the Registry, please create new restore point before proceeding.
System Restore Point - Create
Select: Option Two


Now, please download the ESET ServiceRepair:
http://kb.eset.com/library/ESET/KB%2...icesRepair.exe
Save to the Desktop.
Double-click and run the downloaded file.

When the program runs, a prompt appears asking if you want to proceed.
Click: Yes
When the Services routine is Completed, you are asked to Reboot.
Click Yes to allow the reboot.

The tool creates a folder named CC Support on the Desktop.
Please provide the CC Support\Logs\SvcRepair.txt in your reply.


Last, please run the Farbar Service Scanner once again, provide the FSS.txt in your reply.