Microsoft Security Essentials

S

Slipperyfox

New member
Local time
4:25 AM
Messages
2
I am having no end of trouble trying to get rid of this program. I have been reading for the last 2 days and still unable to get rid of.
I am running Windows 7 Home Premium 4 gig ram

Things I have tried are:

  • Tried to reinstall the application when I try that I get an error and am Installing as Admin
  • Tried Microsoft Fix it 50535. No Good get an error code 2203 (installer has encountered and expected error installing this package. This may indicate a problem with this package.) I get this error with any application I try and install
  • Tried Microsoft Fix it Program Install and Uninstall. Ran manually and auto and same outcome.<LI xzf9="1">Tried to delete in regedit and tells me Can not delete error with keys
  • Have ran batch file and get the following

Code: 
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{6D02ECF8-54B0-4A34-9CB9-40383BDC2AE9}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{6D4026D4-8F72-4ECF-B51A-5A7C22F7559F}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{882741A4-4C85-45B5-A253-7B36E5534C07}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{88A3C23C-E988-46E8-842A-0D336BD91EF5}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{974F27A9-BF40-4791-AC27-37651AC66CB2}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{B160CEFE-EF40-4C56-B144-8C5C9C7BDE13}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{B4FAD909-AC6E-4327-98C2-ED2B0BA62CF6}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{BE43EAEF-E050-4445-8975-A9606F22F5CB}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{C1824DD3-9ABB-42D2-94F4-D82EBF5B1699}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{CE3554D6-D70F-42D8-AD31-61F26DAD266D}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{E43C38D2-DE17-49F4-8D86-EE03A7890016}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{E7AE8BE6-F1D7-4B93-A42A-D8E94AEB12D5}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\History\Results\Resource\{FFCAE988-81B9-43B8-A564-CBA57A2C20CF}" now owned
by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\[URL="http://www.sevenforums.com/#"]Microsoft[IMG]http://cdncache-a.akamaihd.net/items/it/img/arrow-10x10.png[/IMG][/URL]\[URL="http://www.sevenforums.com/#"]Microsoft[IMG]http://cdncache-a.akamaihd.net/items/it/img/arrow-10x10.png[/IMG][/URL] Antimalware\S
cans\History\Store\67EB0C947CCA3515E63DF6D4A672720F" now owned by the administra
tors group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\1" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\2" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\3" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\4" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\1\0000000000000000.idx" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\2\0000000000000000.idx" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\3\0000000000000000.idx" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\MetaStore\4\0000000000000000.idx" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
cans\RtSigs\Data" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
upport\MPDetection-04042015-191606.log" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
upport\MPLog-03032015-112904.log" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
upport\MpWppTracing-04052015-153345-00000003-ffffffff.bin" now owned by the admi
nistrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
upport\MpWppTracing-04052015-153511-00000003-ffffffff.bin" now owned by the admi
nistrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Antimalware\S
upport\MpWppTracing-04052015-154343-00000003-ffffffff.bin" now owned by the admi
nistrators group.
C:\[URL="http://www.sevenforums.com/#"]Program[IMG]http://cdncache-a.akamaihd.net/items/it/img/arrow-10x10.png[/IMG][/URL] Files\[URL="http://www.sevenforums.com/#"]Microsoft Security[IMG]http://cdncache-a.akamaihd.net/items/it/img/arrow-10x10.png[/IMG][/URL] Client>takeown /f "C:\ProgramData\Microsoft\
Microsoft Security Client" /a /r
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Security Clie
nt" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Security Clie
nt\Support" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Security Clie
nt\Support\EppSetup.etl" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Security Clie
nt\Support\EppSetup.log" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Security Clie
nt\Support\EppSetupResult.ini" now owned by the administrators group.
SUCCESS: The file (or folder): "C:\ProgramData\Microsoft\Microsoft Security Clie
nt\Support\MSSecurityClient_Setup_4.7.205.0_epp_Install.log" now owned by the ad
ministrators group.
C:\Program Files\Microsoft Security Client>takeown /f "C:\Program Files\Microsof
t Security Client" /a /r
ERROR: Access is denied.
C:\Program Files\Microsoft Security Client>REM Delete the MSE folders.
C:\Program Files\Microsoft Security Client>rmdir /s /q "C:\ProgramData\Microsoft
\Microsoft Antimalware"
C:\ProgramData\Microsoft\Microsoft Antimalware\DEFINI~1\{4C159~1\mpengine.dll -
Access is denied.
C:\ProgramData\Microsoft\Microsoft Antimalware\IMpServiceEDB4FA23-53B8-4AFA-8C5D
-99752CCA7094.lock - The process cannot access the file because it is being used
by another process.
C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\CACHEM~1\MpScanCach
e-1.bin - The process cannot access the file because it is being used by another
process.
C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\MpDiag.bin - The process ca
nnot access the file because it is being used by another process.
C:\ProgramData\Microsoft\Microsoft Antimalware\Support\MPDetection-04042015-1916
06.log - The process cannot access the file because it is being used by another
process.
C:\ProgramData\Microsoft\Microsoft Antimalware\Support\MPLog-03032015-112904.log
- The process cannot access the file because it is being used by another proces
s.
C:\Program Files\Microsoft Security Client>rmdir /s /q "C:\ProgramData\Microsoft
\Microsoft Security Client"
C:\Program Files\Microsoft Security Client>rmdir /s /q "C:\Program Files\Microso
ft Security Client"
C:\Program Files\Microsoft Security Client\DbgHelp.dll - Access is denied.
C:\Program Files\Microsoft Security Client\EppManifest.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MpAsDesc.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MpClient.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MpCmdRun.exe - Access is denied.
C:\Program Files\Microsoft Security Client\MpCommu.dll - Access is denied.
C:\Program Files\Microsoft Security Client\mpevmsg.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MpOAv.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MpRTP.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MpSvc.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MSESysprep.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MsMpCom.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MsMpEng.exe - Access is denied.
C:\Program Files\Microsoft Security Client\MsMpLics.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MsMpRes.dll - Access is denied.
C:\Program Files\Microsoft Security Client\msseces.exe - Access is denied.
C:\Program Files\Microsoft Security Client\msseoobe.exe - Access is denied.
C:\Program Files\Microsoft Security Client\msseooberes.dll - Access is denied.
C:\Program Files\Microsoft Security Client\MsseWat.dll - Access is denied.
C:\Program Files\Microsoft Security Client\NisIpsPlugin.dll - Access is denied.
C:\Program Files\Microsoft Security Client\NisLog.dll - Access is denied.
C:\Program Files\Microsoft Security Client\NisSrv.exe - Access is denied.
C:\Program Files\Microsoft Security Client\NisWFP.dll - Access is denied.
C:\Program Files\Microsoft Security Client\Setup.exe - Access is denied.
C:\Program Files\Microsoft Security Client\SetupRes.dll - Access is denied.
C:\Program Files\Microsoft Security Client\shellext.dll - Access is denied.
C:\Program Files\Microsoft Security Client\SqmApi.dll - Access is denied.
C:\Program Files\Microsoft Security Client\SymSrv.dll - Access is denied.
C:\Program Files\Microsoft Security Client\SymSrv.yes - Access is denied.
The process cannot access the file because it is being used by another process.
C:\Program Files\Microsoft Security Client>REM Stop the WMI and its dependency s
ervices
C:\Program Files\Microsoft Security Client>sc stop sharedaccess
[SC] ControlService FAILED 1062:
The service has not been started.
 
C:\Program Files\Microsoft Security Client>sc stop MpsSvc
SERVICE_NAME: MpsSvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 3 STOP_PENDING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x7530
C:\Program Files\Microsoft Security Client>sc stop wscsvc
SERVICE_NAME: wscsvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 3 STOP_PENDING
(STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
C:\Program Files\Microsoft Security Client>sc stop iphlpsvc
SERVICE_NAME: iphlpsvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 3 STOP_PENDING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x7530
C:\Program Files\Microsoft Security Client>sc stop winmgmt
[SC] ControlService FAILED 1051:
A stop control has been sent to a service that other running services are depend
ent on.
 
C:\Program Files\Microsoft Security Client>REM Delete the Repository folder.
C:\Program Files\Microsoft Security Client>rmdir /s /q "C:\Windows\System32\wbem
\Repository"
C:\Windows\System32\wbem\Repository\INDEX.BTR - The process cannot access the fi
le because it is being used by another process.
C:\Windows\System32\wbem\Repository\MAPPING1.MAP - The process cannot access the
file because it is being used by another process.
C:\Windows\System32\wbem\Repository\MAPPING2.MAP - The process cannot access the
file because it is being used by another process.
C:\Windows\System32\wbem\Repository\MAPPING3.MAP - The process cannot access the
file because it is being used by another process.
C:\Windows\System32\wbem\Repository\OBJECTS.DATA - The process cannot access the
file because it is being used by another process.
C:\Program Files\Microsoft Security Client>sc stop
DESCRIPTION:
Sends a STOP control request to a service.
USAGE:
sc <server> stop [service name] <reason> <comment>
<reason> = Optional reason code number for service stop
formed with the following elements in the format:
Flag:Major reason:Minor reason
[E.g., 1:2:8 means Hardware: Disk (Unplanned)]
Flag Major reason
------------------ ---------------------------
1 - Unplanned 1 - Other
2 - Custom 2 - Hardware
4 - Planned 3 - Operating System
4 - Software
5 - Application
64-255 - Custom
Minor reason
-----------------------------------
1 - Other
2 - Maintenance
3 - Installation
4 - Upgrade
5 - Reconfiguration
6 - Hung
7 - Unstable
8 - Disk
9 - Network Card
10 - Environment
11 - Hardware Driver
12 - Other Driver
13 - Service Pack
14 - Software Update
15 - Security Fix
16 - Security
17 - Network Connectivity
18 - WMI
19 - Service Pack Uninstall
20 - Software Update Uninstall
22 - Security Fix Uninstall
23 - MMC
256-65535 - Custom
<comment> = Optional comment for the reason above (127 characters maximum
)
C:\Program Files\Microsoft Security Client>PAUSE
Press any key to continue . . .

I have deleted the folder out of the %temp% as well as in the %Appdata%. In Program dir I still have
a folder Microsoft Security Client. In the Programdata under Microsoft I have Microsoft Antimalware and Microsoft Security Essentials and unable to delete any of them.
I am unable to stop the service running MSMPSVC with "TaskKill" using both the name and PID
When I go into Services I am unable to change the Start-up type is on auto and unable to Stop or Pause as well.

Can someone please help out. I hoping there is an easy fix so I don't have to rebuild.
Thanks in advance
 
Last edited by a moderator:

My Computer

OS
Windows 7 Professional x64
CPU
i5 760
Motherboard
P55A-UD3P
Memory
12 gig Kingston Hyper X
Graphics Card(s)
GeForce GTS450
Monitor(s) Displays
Samsung B2430
Hard Drives
4x1TB WD
1x2TB WD
Case
Cool Master
Hello Slipperyfox:

You do not need to uninstall MSE. Any truly top rated successor antivirus application will simply disable MSE during its installation phase. You will receive the heartfelt recommendations Ad nauseam as to which your upgraded AV should be. Ultimately the choice is yours. Do your homework and you should be pleased with the outcome.

Cheers :)
 

My Computer

Computer type
PC/Desktop
OS
W7

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom assembled by me :}
OS
Win-7-Pro64bit 7-H-Prem-64bit
CPU
i7-5930K 2nd i9-9940x both water blocked VRM's too
Motherboard
ASUS SABERTOOTH X99 2nd ASUS x299 Apex
Memory
Trident-z 3200C14 2nd Trident-z 3600C16
Graphics Card(s)
EVGA 1080ti ftw3 2nd Titan Xp both water blocked
Sound Card
Built-in Realtek
Monitor(s) Displays
1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24" 144Hz
Screen Resolution
1920 x 1080 144Hz
Hard Drives
2-Samsung M.2 Evo & Evo Plus
2-Samsung 850 EVO 500GB SSD's/ 3-2.5 W.D. Black 1tb-&3-1tb/3-3.5 WD Black 1tb hdd's
PSU
EVGA SuperNOVA 1000-P2 2nd 1200-P2
Case
2-Corsair Obsidian Series 450D Black ATX Mid Tower
Cooling
Custom water loops
Keyboard
Logitech G710+/ 2nd Logitech G910
Mouse
2-RedDragon M901 Perdition 16400 dpi Gaming mouse = wired
Internet Speed
Comcast Ping 19ms 89.31mbps download speed 6.12mbps upload
Antivirus
Malwarebytes Pro/ Superantispyware Pro
Browser
FireFox & Pale moon
Other Info
2nd ASUS X299 Apex/Intel i9-9940x with Custom water loop/7H-Prem-x64/Corsair 450D case/Ram Trident-z 3600C16 4x8gb / Samsung970Evo plus 500gb SSD/Dual ssd EZ swap evo/PSU EVGA SuperNova 1200w-P2 80+Platinum/GPU Titan Xp /8-ML-140 on push-pull on 2-280GTX rads
Hi:

1PW said:
You do not need to uninstall MSE. Any truly top rated successor antivirus application will simply disable MSE during its installation phase.
Click to expand...

That may be a bit of an over-generalization?

For Kaspersky products, as an example, it is in fact always strongly recommended that other AVs be cleanly and thoroughly uninstalled prior to installing, using the vendor's removal tool, if available.

If the user does not do so, KIS/KAV/PURE/KTS will automatically attempt to remove (rather than disable) MSE and a host of other incompatible applications during its installation, as listed here (certain others must be removed manually).
If the existing AV installation is corrupted or broken, then KIS/KAV/PURE/KTS may have trouble uninstalling it, and that could lead to a KIS/KAV/PURE/KTS install failure.
Even if the install succeeds, Kaspersky products, as well as many other security products, can be finicky about leftover drivers and other remnants of other security products.


Cheers,
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Dell Studio XPS 8500
OS
OEM Windows 7 Ult (x64) SP1
CPU
Intel Core-i7 3770 @ 3.4 GHz
Motherboard
"Dell" branded
Memory
16 GB DDR3 SDRAM @ 1333 MHz
Graphics Card(s)
NVidia GeForce GT620 1 GB
Sound Card
THX TruStudio PC
Monitor(s) Displays
Dell U2410 Full HD
Hard Drives
2.0 TB SATA2 @ 7200 RPM
PSU
350W
Keyboard
MS 4000 Ergon - Wired
Mouse
Logitech Anywhere MX
Internet Speed
Cable HSI w/Turbo (router)
Antivirus
KIS-MBAM Premium-MBAE Premium
Browser
Fx (current version); IE
Other Info
And a Win7/64 Pro laptop; And a Win10/64 Pro desktop.
I ended up finding another tread and put me onto PSexec and this then worked kind of.
Can't delete registry key - Microsoft Community

https://technet.microsoft.com/en-us/sysinternals/bb897553.aspx
I ran the regedit using PSexec with the command and manage to delete all relations to Microsoft Security Essentials, Microsoft Security Centre, and tried to delete MsMpSvc but wouldnt let me but deleted the ones I could.
I then booted into Safe Mode and deleted the folders in Program folder, Program(x86) and Programdata, then rebooted and problem fixed. It still shows in Services but not turned On. I then was able to install ESet and Malware protection. I also used the program Hitman Pro.
 

My Computer

OS
Windows 7 Professional x64
CPU
i5 760
Motherboard
P55A-UD3P
Memory
12 gig Kingston Hyper X
Graphics Card(s)
GeForce GTS450
Monitor(s) Displays
Samsung B2430
Hard Drives
4x1TB WD
1x2TB WD
Case
Cool Master
You must log in or register to reply here.
Back
Top