For member "Access Denied" windows security center registration issue

[Access Denied]

I am seeing the same thing after a reboot. I posted in the beta section by not paying attention that the BETA was removed from my version when the final 4 was installed.

[Access Denied]

mbst-grab-results.zip

[Maurice Naggar]

@Access Denied
This is what I notice on your Windows 10 system  ( per the reports).
This machine has ESET security installed & ON.
That explains why the WIN10 Windows Defender is disabled.
The Malwarebytes Premium does show as having all protections ON  & it is registered into Security Center as antivirus.

Since you have Windows 10 & ESET  ( and Malwarebytes Premium is on & protecting) you do not have to have MB4 register.
You can flip the MB4 selection ( under Settings >> Security tab ) to OFF.    ( button to the left & with a grey background).
 

Edited November 9, 2019 by Maurice Naggar

[Access Denied]

5 hours ago, Maurice Naggar said:

@Access Denied
This is what I notice on your Windows 10 system  ( per the reports).
This machine has ESET security installed & ON.
That explains why the WIN10 Windows Defender is disabled.
The Malwarebytes Premium does show as having all protections ON  & it is registered into Security Center as antivirus.

Since you have Windows 10 & ESET  ( and Malwarebytes Premium is on & protecting) you do not have to have MB4 register.
You can flip the MB4 selection ( under Settings >> Security tab ) to OFF.    ( button to the left & with a grey background).
 

I uninstalled ESET a while back. Apparently the uninstaller the app uses, left some data behind. I used the ESET Uinstaller tool from safe mode, but the Malwarebytes Support Tool still shows ESET registered in the Security Center. The ESET log from the uninstaller shows it was removed from the Security Center. I am not sure how to remove it manually. Kind of frustrating.

[Maurice Naggar]

@Access Denied     & only Access Denied

I would like for you to run the ESET uninstall tool in regular mode of Windows.   ( you'd said it was run in Safe mode).

 

Download the ESET Uninstaller and save it to your Desktop.

Run the tool.

When all done, RESTART Windows.    Then let me know where things stand.

I expect we will need some further cleanup.   I will likely make a special topic for one to one help.

 

[Access Denied]

18 minutes ago, Maurice Naggar said:

@Access Denied     & only Access Denied

I would like for you to run the ESET uninstall tool in regular mode of Windows.   ( you'd said it was run in Safe mode).

 

Download the ESET Uninstaller and save it to your Desktop.

Run the tool.

When all done, RESTART Windows.    Then let me know where things stand.

I expect we will need some further cleanup.   I will likely make a special topic for one to one help.

 

 

[Access Denied]

Also, this is after using Revo Uninstaller Pro to trace the ESET install and removal. I then had it do an advanced search for all things related and removed them. Rebooted and ran the support tool. This is still in the logs.

[Maurice Naggar]

Hi Access Denied.

This Topic is just only for you.

I would like to do a search to see just where the reference to ESET is   &  after we get the search result, I will guide you further for cleanup.

 

The tool named FRSTENGLISH is on the Downloads folder.   It is a well known and safe tool widely used.

Use Windows File Explorer  and go to your Downloads folder       C:\Users\Access\Downloads

Start FRSTENGLISH

When prompted by Windows, reply YES to proceed forward.

 

.

On the FRST  ( FRSTENGLISH )  window

Type the following ( better yet, use COPY  then Paste)   into the search box exactly as show then press the Search Files button

SearchAll: ESET

Please wait while the program searches for all entries relating to this program, when done a search.txt log will be saved to the desktop. Please attach this log to your next reply.

 

[Access Denied]

Search.txt

[Maurice Naggar]

Thanks for the Search log.

The following is another cleanup to remove leftover references to ESET.   Continue to have patience.  It may take more iterations.

This custom script is for member Access Denied  only.

Close and save any open work files before starting this procedure.  I am sending a  custom fix script to do some cleanups. 

This is intended to remove leftover references to ESET security.

 

Please Close and save any open work files before you start this next step.  It may involve a Windows Restart at the end of it.

I am sending a   custom Fix script which is going to be used by the FRSTENGLISH tool. They will both work together as a pair.

Please RIGHT-click the (attached file named) FIXLIST and select SAVE AS and save it directly ( as is) to the Downloads  folder

The tool named FRSTENGLISH.exe   tool    is already on the Downloads folder.

Start the Windows Explorer and then, open the Downloads folder.


Double click FRSTENGLISH

  to run the tool. If the tool warns you the version is outdated, please download and run the updated version.

IF Windows prompts you about running this, select YES to allow it to proceed.

 

IF you get a block message from Windows about this tool......

click line More info information on that screen

and click button Run anyway on next screen.

 

on the FRST window:
Click the Fix button just once, and wait.

 

 

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. This run here should be fairly quick.
If you receive a message that a reboot is required, please make sure you allow it to restart normally.
The tool will complete its run after restart.
When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run.

Please attach the FIXLOG.txt with your next reply  later when all done.

[    2    ]

I would like for you to proceed and do this too as well.

Let’s do another special search.

We need to search for a few things with SystemLook:

Please download SystemLook (64-bit) by jpshortstuff and save it to your desktop

Right-click SystemLook_x64.exe and select Run as Administrator to start the tool.

If prompted by Windows  UAC, please allow it  to run.
If you receive an "Open file - security warning"... asking "Do you want to run this file?", press the Run button.

 

COPY & paste the entire text  ( 2 lines AS IS  ) into the main text box of SystemLook:
 

:regfind

eset security

 

Click the Look button to start the scan

When finished, a notepad window will open with the results of the scan.

A file will be created (on the same folder where you saved SystemLook) with the results of the scan, named SystemLook.txt

Please attach  this log in your next reply.

 

 

 

Edited November 11, 2019 by Maurice Naggar

[Access Denied]

Fixlog.txt SystemLook.txt

[Maurice Naggar]

Thanks for the reports.   The FRST fix succeeded.   There should be much fewer references to ESET at this point.

 

The tool named FRSTENGLISH is on the Downloads folder.   

Use Windows File Explorer  and go to your Downloads folder       

Start FRSTENGLISH

When prompted by Windows, reply YES to proceed forward.

 

.

On the FRST  ( FRSTENGLISH )  window

Type the following ( better yet, use COPY  then Paste)   into the search box exactly as show then press the Search Registry button      <<<--

eset security

Please wait while the program searches for all entries relating to this program, when done a search.txt log will be saved to the desktop. Please attach this log to your next reply.

 

[Access Denied]

SearchReg.txt

[Maurice Naggar]

Thank you for the report.  Would you just take a look at Windows'   Control Panel Security Center status ?

Control Panel\System and Security\Security and Maintenance

and then click on the Security drop down arrow.

Review

and then also click on Virus and Threat Protection

 

{  or you can get there by typing in 

check security status

in the Windows 10 Search box  }    and then click on that

 

++

open your Downloads folder
    Double-click mb-support-1.5.3.749.exe  to run the report
        You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
        
    Place a checkmark next to Accept License Agreement and click Next
    You will be presented with a page stating, "Get Started!"

    Do NOT use the button “Start repair” !
    Click the Advanced tab on the left column
    
    Click the Gather Logs button
    
    A progress bar will appear and the program will proceed with getting logs from your computer
   
    Upon completion, click a file named mbst-grab-results.zip will be saved to your Desktop. Click OK
    Please attach the ZIP file in your next reply.

 

Thank you.

 

 

[Access Denied]

I rebuilt the WMI repository earlier. Now ESET is gone from there, but Windows is reporting both WD and MB are off when they are actually both on. Here is the zip.

 

 

mbst-grab-results.zip

[Access Denied]

Update, WD says it is active and no Security Center alerts. However MB is installed, active and set to register in the Security Center, but is not doing so. I have rebooted a couple times, as well as removed MB and reinstalled. Currently at this state, with MB on and should be registered in there, WD should be off because of that, but MB is not registering.

[Access Denied]

I can however toggle the setting in MB to off/on for registering and it turns WD off and everything is the way I like it.

[Access Denied]

I am done tinkering/working on it for the night. Will check back in the morning. Thanks for all your help Maurice.

[Maurice Naggar]

OK.   Thanks so much for the status update.    The rebuild of WMI is a capital move  in this siyuation.

I am very happy to know that ESET security is not now in the mix.  The last MBST support tool report confirms that.

From here forward, it is up to you if you want to have Windows Defender as an active protection or not.

Cheers.

[Access Denied]

Malwarebytes will still not register itself in the Security Center, even if I wait 10 minutes after a reboot. I am going to just live with it until I do a clean install. If it does it on a clean install, I will just reload my backup image that I take before the install and post back with results. Will not be doing the clean install until Monday at the earliest.

[Maurice Naggar]

Hello.

There is some news on the issue.  Please see the remarks by LiquidTension on this link

So hold off on doing  anything extra-ordinary.   Just be sure that all 4 real-time protections of Malwarebytes Premium are on.

 

You should delete the FIXLIST.txt file I had you save.    ( at least, we did remove the last traces of ESET ).

You may delete Fixlog.txt  and any file, tool I had you download.

If you would, I would like to see a status report from Windows about the current status of Security Center.   This does not make any changes.

The command below will need to be done from an Elevated Command prompt window
Right click the windows logo lower left corner of your Taskbar > choose Command Prompt (Admin)

Copy  the Paste the whole line AS IS onto the command prompt   & then tap Enter-key

wmic /namespace:\\root\securitycenter2 path antivirusproduct get /value > status.txt

Please attach the file Status.txt  with your reply.

Thank you.

[Access Denied]

I had kind of guessed the issue was what LiquidTension posted. Sunday morning I did a repair install and the issue remained. I look forward to the update which fixes this. Here is the status file you requested.

 

 

status.txt

[Maurice Naggar]

Thank you for the report.

[Access Denied]

You are welcome. Here is another picture of what I see for providers in the Security Center.

 

 

[Maurice Naggar]

Thanks again.   I somewhat suspect that the MB off display here is due to 1 incorrect entry-value  ( quite unfortunate).

It does not affect the effective security of the pc.    The protections are ON.

Lets stay put until we hear from LiquidTension.