I_hate_W10 #1 Posted November 15 I have uninstalled Malwarebytes from windows 10 and cleared everything from the registry except for the key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{23007AD3-69FE-687C-2629-D584AFFAF72B} which will not delete. I have tried to change ownership of the key but still I cannot delete it. Nor am I able to modify any of the values. It appears that this key is preventing Windows Defender from starting. Thanks for any replies. Share this post Link to post Share on other sites
nasdaq #2 Posted November 15 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Please download and run the Uninstaller tool.https://support.malwarebytes.com/docs/DOC-2674 Let me know if the problem is solved. Share this post Link to post Share on other sites
AdvancedSetup #3 Posted November 15 @I_hate_W10 Was that able to resolve your issue? Share this post Link to post Share on other sites
exile360 #4 Posted November 15 (edited) Additionally, verifying and rebuilding the WMI Repository may correct the issue (it is a known fix for obsolete entries and inaccurate data in Security Center/Action Center). The following articles provide further details: https://techcommunity.microsoft.com/t5/Ask-The-Performance-Team/WMIDiag-2-2-is-here/ba-p/375642https://success.solarwindsmsp.com/kb/solarwinds_n-central/Re-sync-or-rebuild-the-WMI-Repositoryhttps://techcommunity.microsoft.com/t5/Ask-The-Performance-Team/WMI-Rebuilding-the-WMI-Repository/ba-p/373846 NOTE: while I have verified these functions in Windows Vista and Windows 7, I do not know for certain that they work the same in Windows 10, so please follow the advice from AdvancedSetup if he believes this method should not be used. Edited November 15 by exile360 Share this post Link to post Share on other sites
I_hate_W10 #5 Posted November 15 18 minutes ago, AdvancedSetup said: @I_hate_W10 Was that able to resolve your issue? Hi Ron, I'm afraid not. The registry key that I was looking at removing is still there and cannot be removed by me even though I am the administrator and I have taken ownership. I don't know for sure but I suspect this key is stopping me from switching Windows Defender AV on which means I have no anti-virus protection. Mike Share this post Link to post Share on other sites
AdvancedSetup #6 Posted November 15 (edited) Let me have you run the following so that we can see what's going on @I_hate_W10 Please download Farbar Recovery Scan Tool and save it to your desktop. Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit Double-click to run it. When the tool opens click Yes to disclaimer. Press the Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply. The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well. Thank you Ron Edited November 15 by AdvancedSetup updated info Share this post Link to post Share on other sites
I_hate_W10 #7 Posted November 15 Hi Ron scan completed, files attached. Thanks Mike Addition.txt FRST.txt Share this post Link to post Share on other sites
AdvancedSetup #8 Posted November 15 Let me have you start out by Uninstalling Java. Please go into Control Panel, Programs, Add/Remove and uninstall JAVA Then reboot the computer. Share this post Link to post Share on other sites
AdvancedSetup #9 Posted November 15 Once you have uninstalled Java please run the following fix. It will check on Windows operating system file integrity as well as clean up temp files and remove a couple of very old programs from 2004 from starting when Windows starts. Almost any software from that long ago needs to be verified that it's still both valid and useful on Windows 10 Please download the attached fixlist.txt file and save it to the Desktop. NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system. Run FRST or FRST64 and press the Fix button just once and wait. If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart. The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply. Note: If the tool warned you about an outdated version please download and run the updated version. fixlist.txt Thanks Ron Share this post Link to post Share on other sites
I_hate_W10 #10 Posted November 16 Hi Ron, What programmes will be removed? I do not know of any programmes that are so old and not needed. Regards Mike Share this post Link to post Share on other sites
AdvancedSetup #11 Posted November 16 activeX\AcroIEHelper.dll [2004-12-13] (Adobe Systems, Incorporated Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-13] (Adobe Systems Incorporated) Share this post Link to post Share on other sites
AdvancedSetup #12 Posted November 16 Nothing that old from Adobe is even safe to run on Windows 10 Share this post Link to post Share on other sites
I_hate_W10 #13 Posted November 16 If ever another reason was needed to get rid of W10 , this is it. It is surely time to change. It is a bad show when MS starts to make expensive software unsafe to use on its operating systems. In what way is Acrobat7 unsafe? Mike Share this post Link to post Share on other sites
I_hate_W10 #14 Posted November 16 13 hours ago, AdvancedSetup said: Once you have uninstalled Java please run the following fix. It will check on Windows operating system file integrity as well as clean up temp files and remove a couple of very old programs from 2004 from starting when Windows starts. Almost any software from that long ago needs to be verified that it's still both valid and useful on Windows 10 Please download the attached fixlist.txt file and save it to the Desktop.NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system. Run FRST or FRST64 and press the Fix button just once and wait. If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart. The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply. Note: If the tool warned you about an outdated version please download and run the updated version. fixlist.txtUnavailable Thanks Ron Hi Ron, I cannot download the file 'fixlist.txt', it quickly becomes unavailable after I refresh the page. Mike Share this post Link to post Share on other sites
AdvancedSetup #15 Posted November 16 (edited) Please try another web browser if needed @I_hate_W10 Edited November 16 by AdvancedSetup updated info Share this post Link to post Share on other sites
I_hate_W10 #16 Posted November 16 Hi Ron, I have completed the fix. The fix log is attached. Mike Fixlog.txt Share this post Link to post Share on other sites
AdvancedSetup #17 Posted November 16 Please follow the link again to remove and reinstall Malwarebytes https://support.malwarebytes.com/docs/DOC-2674 Then let me know if it runs okay now or not and how the computer is working now Share this post Link to post Share on other sites
I_hate_W10 #18 Posted November 16 Hi Ron, I have run the tool and Malwarebytes appears to be working OK but I am still not getting Windows Defender to switch on. It shows under Antivirus in the Settings/Security Providers page but it will not switch on. Widows Update appears to be working but it will not install the Security Intelligence Update for Windows Defender Anti-Virus, KB2267602 update. Regards Mike Share this post Link to post Share on other sites
AdvancedSetup #19 Posted November 16 That KB is from 2 years ago. Let me get a new fresh set of logs from FRST please. But first Reboot the computer 2 times before running FRST Share this post Link to post Share on other sites
I_hate_W10 #20 Posted November 17 Good morning Ron, I have done as requested and the resultant logs are attached. Mike Addition.txt FRST.txt Share this post Link to post Share on other sites
AdvancedSetup #21 Posted November 19 Okay, please run this tool again. But this time just uninstall Malwarebytes and do not allow it to do the reinstall. Once completed please reboot the computer 2 more times. Then run FRST again and post back both new logs again. https://support.malwarebytes.com/docs/DOC-2674 Thanks Ron Share this post Link to post Share on other sites
I_hate_W10 #22 Posted November 19 Hi Ron, Files attached. Mike Addition.txt FRST.txt Share this post Link to post Share on other sites
AdvancedSetup #23 Posted November 19 Hi there. Please try the following. Please download the attached fixlist.txt file and save it to the Desktop. NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system. Run FRST or FRST64 and press the Fix button just once and wait. If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart. The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply. Note: If the tool warned you about an outdated version please download and run the updated version. fixlist.txt Ron Share this post Link to post Share on other sites
I_hate_W10 #24 Posted November 20 Hi Ron, Fixlog file attached. Mike Fixlog.txt Share this post Link to post Share on other sites
AdvancedSetup #25 Posted November 20 Good, that looks good. So, that just confirms this is a known issue with our removal process and a bug has been submitted for it. Hopefully in the next program update they'll address this issue where it shows as installed and disabled even though it's been uninstalled. You can go ahead now and reinstall Malwarebytes and let me know if there are any other issues Thank you Ron Share this post Link to post Share on other sites