Solved Windows Security Center

[KenBaynham]

Hi

I have had problems with the PUP virus and seem to have finally prevented it starting but now I can't start the Windows Security Center or Update service.

I have opened 'SERVICES.MSC' and both are flagged as Automatic (Delayed Start) but when I double click Security Center and try to start I get the message:

Windows cold not start Security Center service on local computer

Error 1068: The dependency service or group failed to start

Hope someone can help

Regards ken.

 

[VistaKing]

Download both of the programs below and save it to your flash drive on a computer that could download . Drag both of the apps to your desktop to Run the two programs on the PC you're having an issue with .

:ar: Farbar Recovery Scan Tool

32-bit Version OS :ar: Farbar Recovery Scan Tool
Right click on FRST.exe and choose

64-Bit Version OS :ar: Farbar Recovery Scan Tool x64
Right click on FRST64.exe and choose

When the tool opens click Yes to disclaimer.
Press Scan button.
FRST will let you know when the scan is complete and has written the FRST.txt to file

   Note

The first time Farbar Recovery Scan Tool is run, it makes also another log Addition.txt

:ar: Farbar Service Scanner
Click here :ar: Downloading Farbar Service Scanner to DOWNLOAD

Right click on FSS.exe and choose

Place a check next to the following options
Internet Services
Windows Firewall
System Restore
Security Center
Windows Update
Windows Defender
Press: Scan

   Note

All three text files FRST.txt , Additional.txt , and FSS.txt will be located inside your flash drive

How To Upload a File
Click on the Go Advanced button under the Message box . Scroll down to Additional Options then click on Manage Attachments in the Attach Files sections . Click the Browse button locate the file then click on the Open button . In the Upload File from your Computer section click on the Upload button . Wait until it finishes uploading then close the window . Then click Submit Reply .

 

[KenBaynham]

Text Files

Thanks for reply VistaKing.

Hope I got things right.

 

[VistaKing]

Open Notepad . Inside Notepad paste the highlighted text inside notepad


start
HKLM\...\Winlogon: [Shell] [x ] () <=== ATTENTION
HKCU\...\Run: [ASRockOCTuner] - [x]
HKCU\...\Run: [ASRockIES] - [x]
HKCU\...\Run: [zASRockInstantBoot] - [x]
AppInit_DLLs: [0 ] ()
end


Click on File ====> Save As

File Name : Fixlist.txt

Save as type : All Files

Location : Desktop

Click on the [Save] button .

Open FRST tool again from the Desktop and click on the [Fix] button . Once complete it will create a new log called Fixlog.txt . Upload the new log created in your reply . It should be on the desktop .

Then run the two tools below

AdwCleaner

Click here AdwCleaner

:ar: Click on Download Now button

:ar: Save to the Desktop

:ar: Right-click on AdwCleaner.exe and choose

:ar: Click on Delete and confirm the prompt.

:ar: Your computer will be rebooted automatically. A text file will open after the restart.

Upload the log : The log file is at C:\AdwCleaner[Sn].txt

Download Junkware Removal Toolkit

Click here Junkware Removal Tool to download

Drag the JRT.exe from the Downloads folder to your Desktop

Right click JRT.exe and choose

Once done upload the JRT.txt file

 

[KenBaynham]

Phew - Hard work VistaKing.

The JRT program just seemed to start and run with no input from me so no chance to start as administrator but did say administrator in the top left of program window.

Hope all is as you instructed.

 

[VistaKing]

On

Internet Explorer
Hold down Control and click on ESET Online Scanner to open ESET OnlineScan in a new window
Click the

button
Check YES, I accept the Terms of Use.
Click the Start button.
Accept any security warnings from your browser.
Under scan settings, check "Scan Archives" and "Remove found threats"
Click Advanced settings and select the following:
° Scan potentially unwanted applications
° Scan for potentially unsafe applications
° Enable Anti-Stealth technology
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click List Threats
Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Click the Back button.
Click the Finish button.

Or

On

Firefox or

Google Chrome
Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
Right click on

choose

on your desktop
Check YES, I accept the Terms of Use.
Click the Start button.
Accept any security warnings from your browser.
Under scan settings, check "Scan Archives" and "Remove found threats"
Click Advanced settings and select the following:
° Scan potentially unwanted applications
° Scan for potentially unsafe applications
° Enable Anti-Stealth technology
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click List Threats
Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Click the Back button.
Click the Finish button.

Once you're done run

Malwarebytes

Download Link :ar: MalwareBytes

When the installation is done uncheck Enable free trial of Malwarebytes (see image below )

Update the definitions and do a full scan

On the Scanner tab:

• Make sure the "Perform Full Scan" option is selected.
• Then click on the Scan button.
• If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
• The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
• When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
• Click OK to close the message box and continue with the removal process.
• Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
• Make sure that everything is checked, and click Remove Selected.
• When removal is completed, a log report will open in Notepad.
• The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
• Copy and paste the contents of that report in your next reply and exit MBAM.

Log looks like this : mbam-log-yyyy-mm-dd

Log located : C:\Users\{Your UserName}\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs or C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs

 

[KenBaynham]

Thought I had got rid of PUP.

Is this bad news?

 

[VistaKing]

<==== Download Link


<==== Download Link

:ar: Click on one of the links above that goes with your Windows 7 bit versions

:ar: Save to the Desktop.

:ar: Close all windows and browsers

:ar: Right click on

and choose

:ar: Press: SCAN

:ar: provide the RKreport.txt (Mode: Scan) in your reply.

 

[KenBaynham]

Thanks for your persistence VistaKing.

 

[VistaKing]

Rerun RogueKiller and select Delete . Once that is done restart the PC . Download a new copy of FRST place it on the Desktop . right click in the frst.exe select Run as administrator click on Scan and upload the new FRST.txt log .

 

[KenBaynham]

Log as requested.

 

[VistaKing]

Is this a new log ? Cause I see

HKLM\...\Winlogon: [Shell] [x ] () <=== ATTENTION

but that was cured on the fixlog before.

From fix log

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-08-2013
Ran by Ken at 2013-08-11 09:21:55 Run:1
Boot Mode: Normal
==============================================

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value was restored successfully.

==== End of Fixlog ====

 

[KenBaynham]

Should have been the latest log. I have done another. Hope it as you require.

 

[KenBaynham]

Hi VistaKing

No correspondence for a couple of days.

Is there a problem?

 

[VistaKing]

Open Notepad . Inside Notepad paste the highlighted text inside notepad

start
HKU\KenBaynham\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-04-20] (Google Inc.)
HKLM\...\Winlogon: [Shell] [x ] () <=== ATTENTION
S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
end


Click on File ====> Save As

File Name : Fixlist.txt

Save as type : All Files

Location : Desktop

Click on the [Save] button .

Open FRST tool again from the Desktop and click on the [Fix] button . Once complete it will create a new log called Fixlog.txt . Upload the new log created in your reply . It should be on the desktop .

Then take a look at this link below
Remove MyWebSearch and home.mywebsearch.com (Uninstall Guide)

 

[KenBaynham]

Hi VistaKing

Sorry about delay in reply but unable to get into my Email account at the moment.

Please fin log as requested.

Thanks again for all your help.

Regards Ken.

 

[VistaKing]

Have you taken a look at the link ?

There is a outage on outlook.com . Some people may not be able to login .

 

[KenBaynham]

I had missed your reference to the link but have opened and can find no program named MyWebSearch or anything similar listed in the uninstall tool.

Email up and running now. Thanks for advice

 

[VistaKing]

Is everything working ?

 

[KenBaynham]

Still have the original problem Vista.


Flag with red cross at bottom right of screen. If I hover over it I get the prompts:


Solve 2 PC issues: 2 important messages 4 total messages


Turn on Windows Security Center service (important)
(When I click on this prompt I get the pop up declaring 'The Windows Security Center Service can't be started.) The services manager (services.msc) informs the service is stopped. If I attempt to start the service I am informed 'Windows could not start the Security Service on the local computer. Error: 1068 the dependency service failed to start.




Windows could not check for updates automatically
Clicking on the prompt reveals a pop up and the message 'Windows could not search for new updates. An error occurred while checking for updates on your computer. Error(s) found: Code 80070422. It also informs that the most recent check for updates was 30/06/2013. The services manager informs the service is started.


Check your backup results
Clicking this prompt reveals the pop up message 'The backup application could not start due to an internal error: The services cannot be started, either because it is disabled or because it has no enabled device associated with it. (0x80070422).' I found this disabled in the services manager. I set to automatic delayed and started. Clicking the prompt again revealed a pop up message 'The backup completed but some files were skipped' and invited view skipped files. Attempting to do this revealed lack of an error log. The pop up also invited me to 'Change back up settings'. When clicked I get the original error The backup application could not start due to an internal error: The services cannot be started, either because it is disabled or because it has no enabled device associated with it. (0x80070422).'


Solve a problem with Microsoft Visual Studio
Clicking brings up a pop up with the information: 'The solution could not be downloaded. Most likely causes:

• The problem report for this solution deleted of changed on this computer and is no longer available.