MSSE - Unable to Uninstall Issue

rogerrealsen,

Please go to the Farbar Recovery Scan Tool Download
Select the 64-bit version.
Save it to your Desktop.
Double-click the downloaded file to run it.

When the tool opens click Yes to the disclaimer.
Press the Scan button.

FRST64 makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).

Please provide the FRST.txt in your reply. <<---
The first time the tool is run, it also makes another log: Addition.txt
Also post the: Addition.txt in your reply. <<---



Next, download Farbar Service Scanner


Save to the Desktop

• Make sure the following options are checked:
  
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center
  • Windows Update
  • Windows Defender
• Press: Scan
• FSS creates a log, FSS.txt, on the Desktop.

Please provide the FSS.txt in your reply.

rogerrealsen,

The computer in question has been infected with ZeroAccess, and it can damage Microsoft Security Essentials as well as Windows Defender.

Need to go out for a while, but will get back here later on this afternoon.

Please do not engage in running any programs on the machine. It may make the state of its condition worse, rather than better.

Thank you for your patience.

rogerrealsen,

Please do the following...

Open Notepad (Start > All Programs > Accessories > Notepad)

Copy/paste all the contents inside the quote box below to Notepad (do not copy the word 'Quote').
Save it on the Desktop as: fixlist.txt

start

HKLM\...\Run: [] [x]
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] ATTENTION! ====> ZeroAccess
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKCU -No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
Toolbar: HKCU -No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
C:\$Recycle.Bin\S-1-5-21-4005018724-1160059617-1034603593-1136\$65a11fca10f08648c4aabb308dea3280
C:\$Recycle.Bin\S-1-5-18\$65a11fca10f08648c4aabb308dea3280
DeleteJunctionsIndirectory: C:\Program Files\Windows Defender
DeleteJunctionsIndirectory: C:\Program Files\Microsoft Security Client
end

WARNING: This script is written specifically for rogerrealsen, for use on this particular computer. Running the script on another computer may cause damage to the Operating System!!

Run FRST again, but this time press the Fix button just once, and wait.
FRST should reboot once to finish removing ZeroAccess.

When done, the tool makes a log on the Desktop.
This time it is called: Fixlog.txt

Please post Fixlog.txt in your reply.

rogerrealsen,

Glad you figured out what to do with the Fixlist...could not get a set of double quotes to go away. No clue as to what is wrong. Now the Font size does not want to adjust!! Oh well!!



Since the following steps involve editing the Registry, please create new restore point before proceeding.
System Restore Point - Create
Select: Option Two



Now, please download the ESET ServicesRepair:
http://kb.eset.com/library/ESET/KB%2...icesRepair.exe
Save to the Desktop.
Double-click and run the downloaded file.


When the program runs, a prompt appears asking if you want to proceed.
Click: Yes
When the Services routine is Completed, you are asked to Reboot.
Click Yes to allow the reboot.


The tool creates a folder named CC Support on the Desktop.
Please provide the CC Support\Logs\SvcRepair.txt in your reply.



Last, please run the Farbar Service Scanner once again, provide the new FSS.txt in your reply.


Thanks! :)

Also, is the infected computer runing a 64-bit system, or a 32-bit?

Rather confused on that...below your name 64-bit shows, but, the reports show x86 (32-bit)