cant start defender cant install MSE error code:0x8004FF91

cottonball · 19 Nov 2014

Thanks for the info!

Running your computer without an AV program is not good. It is like throwing a magnet in a bucket of nails.

For now, you may want to consider installing Panda Free AntiVirus. It is light on resources.
I have it installed, and have no problems. You do, on occasion, get a pop-up asking if you want to upgrade to the paid version. I always decline.

Download:
Best Free Antivirus Download | Panda Free Antivirus 2015

Also, please update the items identified in red as: out of date

Next, this tool has worked to identify problems with Windows Defender and MSE, so, please use the
following:
Farbar Recovery Scan Tool Download

Select the version that applies to your system: 64-bit

Save it to your Desktop.

Double-click the downloaded file to run it.
When the tool opens, click Yes to the disclaimer.
Press the Scan button.

When done, the tool makes a log, FRST.txt, in the same directory from which the tool is run (Desktop)

Please provide the FRST.txt in your reply.
The first time the tool is run, it also creates another log: Addition.txt

Also post the Addition.txt in your reply.

FOXEN · 22 Nov 2014

cottonball said:

Thanks for the info!

Running your computer without an AV program is not good. It is like throwing a magnet in a bucket of nails.

For now, you may want to consider installing Panda Free AntiVirus. It is light on resources.
I have it installed, and have no problems. You do, on occasion, get a pop-up asking if you want to upgrade to the paid version. I always decline.

Download:
Best Free Antivirus Download | Panda Free Antivirus 2015

Also, please update the items identified in red as: out of date

Next, this tool has worked to identify problems with Windows Defender and MSE, so, please use the
following:
Farbar Recovery Scan Tool Download

Select the version that applies to your system: 64-bit

Save it to your Desktop.

Double-click the downloaded file to run it.
When the tool opens, click Yes to the disclaimer.
Press the Scan button.

When done, the tool makes a log, FRST.txt, in the same directory from which the tool is run (Desktop)

Please provide the FRST.txt in your reply.
The first time the tool is run, it also creates another log: Addition.txt

Also post the Addition.txt in your reply.

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

Hi, thanks. I tried to cut and paste but a 20000 character limit has me trying to upload the files - please let me know if this works.

FOXEN · 22 Nov 2014

FOXEN said:

cottonball said:

Thanks for the info!

Running your computer without an AV program is not good. It is like throwing a magnet in a bucket of nails.

For now, you may want to consider installing Panda Free AntiVirus. It is light on resources.
I have it installed, and have no problems. You do, on occasion, get a pop-up asking if you want to upgrade to the paid version. I always decline.

Download:
Best Free Antivirus Download | Panda Free Antivirus 2015

Also, please update the items identified in red as: out of date

Next, this tool has worked to identify problems with Windows Defender and MSE, so, please use the
following:
Farbar Recovery Scan Tool Download

Select the version that applies to your system: 64-bit

Save it to your Desktop.

Double-click the downloaded file to run it.
When the tool opens, click Yes to the disclaimer.
Press the Scan button.

When done, the tool makes a log, FRST.txt, in the same directory from which the tool is run (Desktop)

Please provide the FRST.txt in your reply.
The first time the tool is run, it also creates another log: Addition.txt

Also post the Addition.txt in your reply.

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

Hi, thanks. I tried to cut and paste but a 20000 character limit has me trying to upload the files - please let me know if this works.

attached

cottonball · 23 Nov 2014

FOXEN,

Thanks for providing the reports.

As suspected, there are remnants of Norton presented in the reports.

There are no issues reported with Windows Defender or Microsoft Security Essentials.

Will take a look at the reports once again, and prepare a script to remove some items. However, even doing this may not open the door for WD and MSE to work on this machine. There may be Registry entries or some file that still remains in the system. These issues are very difficult to resolve.

If in the end nothing works, there are alternatives to MSE and WD.

Thanks for your patience.

FOXEN · 23 Nov 2014

ok thanks

cottonball · 23 Nov 2014

FOXEN,

Please open Notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the code box below (Do not copy the word 'code') to Notepad.
Save it to the Desktop, and name it: fixlist.txt

Code:

start
CloseProcesses:
CHR Extension: (Norton Identity Safe) - C:\Users\Fiona Hekking\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-09-17]
2014-11-18 08:39 - 2014-11-18 08:39 - 00896048 _____ () C:\Users\Fiona Hekking\Desktop\Norton_Removal_Tool.exe
2014-11-17 15:16 - 2014-11-17 15:16 - 00896048 _____ () C:\Users\Fiona Hekking\Downloads\Norton_Removal_Tool.exe
2014-11-12 11:28 - 2014-11-12 11:29 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-11-17 15:17 - 2010-07-01 14:03 - 00000000 ____D () C:\ProgramData\Norton
2014-11-12 11:29 - 2012-07-12 03:21 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
Task: {47656CF7-4374-49FA-AF6F-6801B8865EB3} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\WSCStub.exe
C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\WSCStub.exe
Task: {B4A27595-9969-4F8B-80D8-8A721A10FAA6} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
Task: {CB42DF1F-ADE5-4C2A-826C-B2387F1BBC72} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe
EmptyTemp:
end

NOTICE: This script is written specifically for this computer!!!
Running this on another computer may cause damage to the Operating System.

Now, please run FRST or FRST64, and press the Fix button, just once, and wait.

If the tool needs a reboot, please let the system do so normally. After that let the tool complete its run.

When done, the tool creates a report on the Desktop called: Fixlog.txt

Please post the Fixlog.txt in your reply.

Thanks!

FOXEN · 23 Nov 2014

thanks but Panda wont let me run FRST?

FOXEN · 23 Nov 2014

no wait, have asked Panda to restore FRST, will run and fix now....

FOXEN · 23 Nov 2014

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 22-11-2014 01
Ran by Fiona Hekking at 2014-11-23 22:00:51 Run:1
Running from C:\Users\Fiona Hekking\Desktop
Loaded Profile: Fiona Hekking (Available profiles: Fiona Hekking & Earl Hekking & kids & Guest)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
CloseProcesses:
CHR Extension: (Norton Identity Safe) - C:\Users\Fiona Hekking\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-09-17]
2014-11-18 08:39 - 2014-11-18 08:39 - 00896048 _____ () C:\Users\Fiona Hekking\Desktop\Norton_Removal_Tool.exe
2014-11-17 15:16 - 2014-11-17 15:16 - 00896048 _____ () C:\Users\Fiona Hekking\Downloads\Norton_Removal_Tool.exe
2014-11-12 11:28 - 2014-11-12 11:29 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-11-17 15:17 - 2010-07-01 14:03 - 00000000 ____D () C:\ProgramData\Norton
2014-11-12 11:29 - 2012-07-12 03:21 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
Task: {47656CF7-4374-49FA-AF6F-6801B8865EB3} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\WSCStub.exe
C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\WSCStub.exe
Task: {B4A27595-9969-4F8B-80D8-8A721A10FAA6} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
Task: {CB42DF1F-ADE5-4C2A-826C-B2387F1BBC72} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe
MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe
EmptyTemp:
end
*****************

Processes closed successfully.
C:\Users\Fiona Hekking\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif => Moved successfully.
C:\Users\Fiona Hekking\Desktop\Norton_Removal_Tool.exe => Moved successfully.
C:\Users\Fiona Hekking\Downloads\Norton_Removal_Tool.exe => Moved successfully.
C:\Windows\System32\Tasks\Norton 360 => Moved successfully.
C:\ProgramData\Norton => Moved successfully.
C:\Windows\System32\Tasks\Norton WSC Integration => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{47656CF7-4374-49FA-AF6F-6801B8865EB3}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{47656CF7-4374-49FA-AF6F-6801B8865EB3}" => Key deleted successfully.
C:\Windows\System32\Tasks\Norton WSC Integration not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton WSC Integration" => Key deleted successfully.
"C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\WSCStub.exe" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B4A27595-9969-4F8B-80D8-8A721A10FAA6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B4A27595-9969-4F8B-80D8-8A721A10FAA6}" => Key deleted successfully.
C:\Windows\System32\Tasks\Norton 360\Norton Error Analyzer not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton 360\Norton Error Analyzer" => Key deleted successfully.
"C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CB42DF1F-ADE5-4C2A-826C-B2387F1BBC72}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CB42DF1F-ADE5-4C2A-826C-B2387F1BBC72}" => Key deleted successfully.
C:\Windows\System32\Tasks\Norton 360\Norton Error Processor not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton 360\Norton Error Processor" => Key deleted successfully.
"C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\SymErr.exe" => File/Directory not found.
MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED => Error: No automatic fix found for this entry.
"C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" => File/Directory not found.
EmptyTemp: => Removed 789.9 MB temporary data.

The system needed a reboot.

==== End of Fixlog ====

cottonball · 23 Nov 2014

Good job!

My bad!!

Should have also removed the following with the fixlist, so please run the following using the fixlist procedure (Post #16}, but with the following info:

Code:

start
CloseProcesses:
C:\Users\Fiona Hekking\Downloads\mseinstall (5).exe
2014-11-17 15:37 - 2014-11-17 15:37 - 14087848 _____ (Microsoft Corporation) C:\Users\Fiona Hekking\Downloads\mseinstall (4).exe
2014-11-17 15:18 - 2014-11-17 15:19 - 14087848 _____ (Microsoft Corporation) C:\Users\Fiona Hekking\Downloads\mseinstall (3).exe
2014-11-17 15:04 - 2014-11-17 15:04 - 14087848 _____ (Microsoft Corporation) C:\Users\Fiona Hekking\Downloads\MSEInstall (2).exe
2014-11-17 14:45 - 2014-11-17 14:45 - 14087848 _____ (Microsoft Corporation) C:\Users\Fiona Hekking\Downloads\MSEInstall (1).exe
2014-11-12 12:33 - 2014-11-12 12:33 - 14087848 _____ (Microsoft Corporation) C:\Users\Fiona Hekking\Downloads\mseinstall.exe
end

Please post the results, and then download a new MSE installer, and try it, but first make sure you disable Panda!