Windows Firewall errors 8007042c and 1068

[cottonball]

It is uninstalled, good job!!

:ar: What worked to get it uninstalled, the command, or the removal tool?

:ar: Also, do you still have the Microsoft Security Folder in Program Files?

Let's make sure the Windows Installer service is running
Please press the Windows key and R key

At the Run prompt, type: services.msc
Press: OK

At the Services console, click Windows Installer, and see if the Service Status is: Started

Exit the Services console.


Next, please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1


Download Mirror #2

• Double-click SystemLook.exe to run it.
• Copy the content of the following codebox into the main field:
  
  

  :reg
  HKEY_CLASSES_ROOT\Installer\Products\24174DC0F4AB0B64AA2962576894828B
  HKEY_CLASSES_ROOT\Installer\UpgradeCodes\11BB99F8B7FD53D4398442FBBAEF050F
  :regfind 
  11BB99F8B7FD53D4398442FBBAEF050F
  24174DC0F4AB0B64AA2962576894828B
  Microsoft Security Client
  Mirosoft Security Essentials

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan.
  
  Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

 

[Bill48]

Good morning.
The command uninstalled MSE. Removal tool not employed.
Microsoft Security Client folder is in Program Files with a date and time consistent with the aborted install. Clicking through that folder, in en-us the result is a message "You don't have permission to access this folder.....To gain access to this folder you will need access to the security tab."
Under Services, installer was not started. Don't know if you wished me to but I changed this to started.
Then ran Systemlook. Txt file attached. Thanks. Bill

 

[cottonball]

Thanks for the info, Bill.

Need to take a good look at these results, and see if a 'magic command' and or deletion will work for us.

Not at home right now, and working from a tablet drives me nuts. Will get back to you in a couple of hours, or sooner, if I am released from this funny farm.

Later!

 

[cottonball]

Please use SyetemLook again, and this time input the following:

:reg
HKEY_CLASSES_ROOT\Installer\UpgradeCodes /s

The log may be large...

 

[Bill48]

Done. Systemlook2.txt attached

 

[cottonball]

Hollie schmollie...

To find out if one of those is related to MSC...


Before engaging in anything else, just had a thought. :tip:

You run Spybot Search and Destroy and TeaTimer.

Try uninstalling Spybot and all its components, restart the computer, and then try the MSE installer once again.

 

[Bill48]

OK. Ran Spybot but, although current with updates, I don't think it's the latest version nor with TeaTimer. No problems reported. Uninstalling Spybot, an uninstall error message briefly flashed before the restart got rid of the message. Spybot is removed from programs to uninstall and from the desktop and All Programs, but I went looking for it and it still has a folder in Program Files (x86), with an application SDWinSec dated 2009 under that. So it is still there. What should I do about it.

Tried reinstalling MSE after the Uninstall of Spybot and it still hangs some way into the install.

 

[cottonball]

The article from Spybot that follows says to uninstall from Control Panel > Programs and Features >Uninstall Programs, then remove related folders afterwards.
For the older version of Spybot, you can delete the installation folder which is usually in C:\Program Files\Spybot – Search & Destroy\

Info > How to uninstall? | Spybot © ? - Search & Destroy

You can also try using a third party uninstaller: Revo Uninstaller Free
Download > Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

Another tool employed in removing Spybot Search and Destroy is: AppRemover
Download > Uninstall McAfee, Symantec & other antivirus software with AppRemover

You can try all three methods, if you wish. If no traces of the program are found, that is what we want.
Have seen situations where Spybot, or AdAware, both known as anti-malware programs, interfere with the installation of programs like McAfee AntiVirus, and others.

Take your time with this. We have actually spent more time trying to get MSE to work than removing the Rootkit!! icnic:

 

[Bill48]

Getting probably a bit too gungho for my boots, I just deleted that folder, restarted and downloaded Spybot afresh without problems. However I am currently downloading AppRemover to "completely" uninstall Spybot (and anything else suspicious), I'll restart and then try MSE again. Back soon.

 

[Bill48]

I ran the fresh Spybot and let it do its thing. Its report is attached. Tried installing MSE, with same non result. Now downloading Revo Uninstaller Pro trial version to again get rid of Spybot. (AppRemover couldn't find Spybot to uninstall. The only apps it found were Malwarebytes and Dropbox.)

Revo had a healthy list of "leftovers". I could neither see nor succeed in recording what I authorised to be deleted. A system restore point had been made. Revo advises to restart to remove more, so doing that.

After restart, after Spybot uninstall via Revo, MSE install again aborts with error message.

 

[Bill48]

Since the above I have run Ccleaner twice - it picked up so much - until no more could be found. Then did a System Clean in Accessories - little to be found after Ccleaner. Then updated Malwarebytes and did a system scan, nothing found. Spybot is still uninstalled. MSE will again not complete setup. Need a break. Thanks again. Bill

 

[cottonball]

Let's give the following a whirl...

:info: Please click on Start, and in the Search programs and files box above it, type: Folder Options
Click on Folder Options to open the folder
Go to the View tab
In Advanced Settings > Files and Folders, scroll down to: Hidden Files and Folders
Tick: Show hidden files, folders and drives
Click: Apply > OK

:info: Now, please delete the following folder:
C:\Program files\Microsoft Security Client

Right-click Start, and select: Open Windows Explorer
Navigate to C:\Program Files\Microsoft Security Client
Right-click and select: Delete

:warn: If you receive a notice precluding the deletion of the folder, please follow the steps below to modify the folder's permissions:

Access the Command Prompt
Copy/paste the following in the Command Prompt, and press: Enter

ICACLS “C:\Program Files\Microsoft Security Client” /t /g everyone:f

Now, delete the C:\Program Files\Microsoft Security Client folder


:info: Also follow the same steps above to remove the following folders:

1. C:\ProgramData\Microsoft\Microsoft Antimalware
To grant access, use:

ICACLS “C:\ProgramData\Microsoft\Microsoft Antimalware” /t /g everyone:f

2. C:\ProgramData\Microsoft\Microsoft Security Client
To grant access, use:

ICACLS “C:\ProgramData\Microsoft\Security Client” /t /g everyone:f

Type Exit to close the Command Prompt.


:info: Now, please remove the MSE installer on the Desktop, and download a new installer for Microsoft Security Essentials:
Download > http://windows.microsoft.com/en-US/windows/security-essentials-all-versions
Select the English version, press the drop arrow of Select your version. and select the Windows 7 64-bit version.

Run the new installer for Microsoft Security Essentials.

Please restart the computer if the installation completes.

 

[Bill48]

Followed all those. Deleting MS Client gets message need administrators permission. I engaged command as administrator (typed cmd in Start and used Ctrl+Shift+Enter). Again ran the first procedure and the other two. In all circumstances I did not have sufficient permission to alter that folder. Sorry. Did not know then whether it was worth performing the removal of the installer and so on. Await your guidance. Bill (Already Saturday here and I had family commitments this morning that kept me from earlier response.) (Do I need to undo any of the above entries?)

 

[cottonball]

Bill,

Try post #72 again. Edited content.

Looks as if the cacls command, used to display or change access control, was available in Windows 7, but it apparently got phased out. Microsoft recommends that you use the icacls command instead.
Was not aware of this.

 

[Bill48]

After the first command copy and paste, get response Invalid parameter "Files\Microsoft".

 

[cottonball]

Hmmmm....

I'll need to get some guidance on this.

Permissions...ugh!!

 

[Bill48]

For that one command, would it work to change the directory to Program Files? Don't really know what I am talking about. B.

 

[cottonball]

G'day Bill!!

Let's take a different approach and give FRST64 a whirl to unlock the folders.

The developer of this tool spends lots of time and effort keeping it up to date in order to deal with all sorts of malware, and its aftermath. The current version of the tool unlocks files/folders, even if reparse points/junctions are no longer present.

So, please do the following:

Remove any previous version of FRST64 on the Desktop, and download a new copy:
Download > Farbar Recovery Scan Tool Download
Select the version that applies to your system: 64-bit
Save it to the Desktop.

Next, open Notepad, and copy/paste the following to it:

start
DeleteJunctionsInDirectory: C:\Program Files\Microsoft Security Client
end

Name the file fixlist, and also place it on the Desktop.

Now, restart the computer, and tap F8 in order to select: Safe Mode
In Safe Mode, run FRST64
Press the Fix button, just once, and wait.

When done, the tool creates a report on the Desktop called: Fixlog.txt
:ar: Please post the Fixlog.txt in your reply.

Also, try installing MSE again.

If no-go, please check if Microsoft Security Essentials is showing in Control Panel > Programs and Features. Let us know.

Thanks.


.

 

[Bill48]

Good morning again. Thank you for your continued effort. I've reinstalled FRST64 after deleting it and its file. Ran it in Safe Mode and attach fixlog. MSE still aborts, seemingly at an earlier stage than before, but that may be just me. MSE is not listed in Programs but the Client is still in Program Files. The attempted install was from the installer still on the desktop. Bill

 

[cottonball]

Bill48,

If MSE is still not installing, please go to the following folders, right-click each one, and rename them:

C:\Program files\Microsoft Security Client rename to C:\Program files\Old Microsoft Security Client

C:\ProgramData\Microsoft\Microsoft Antimalware rename to C:\ProgramData\Microsoft\Old Microsoft Antimalware

C:\ProgramData\Microsoft\Microsoft Security Client rename to C:\ProgramData\Microsoft\Old Microsoft Security Client

If you have no problem doing the above, then try installing MSE once again.

Good luck!!