PC's Adminstrative Permissions and Windows Defender are disabled

[EthanKTM461]

Some Administrative Permissions on my PC are disabled, as well as Windows Defender options (all).

Addition.txt FRST.txt

[Maurice Naggar]

Hi,      
My name is Maurice. I will be helping and guiding you, going forward on this case.
Let me know what first name you prefer to go by.

Please follow my directions as we go along.  Please do not do any changes on your own without first checking with me.  
Please only just attach   all report files, etc  that I ask for as we go along.

Please know I help here as a volunteer.  and that I am not on 24 x 7.

 

Before we get going, the first thing I urge you to do is, to uninstall ' TotalAV '

You will do better & simpler with the Microsoft Windows Defender as the resident antivirus.   The Windows Defender in Windows 10 is a strong & very capable, & free, & built in with Windows 10.

Here are the steps I suggest, starting with doing a regular uninstall.

1. Press & hold  the Windows key on keyboard & then tap the R key   to open the Run command.

2. Type 

appwiz.cpl 

and tap Enter.
The Programs and Features window will appear.

 

3. Locate  TotalAV  and click once to select it, then click the Uninstall button.

.

NEXT

The Microsoft Safety Scanner  is a free Microsoft stand-alone virus scanner that  can be used to scan for & remove malware or potentially unwanted software from a system. 
The download links & the how-to-run-the tool are at this link at Microsoft 
https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download

  
Let me know the result of this.
The log is named MSERT.log  
the log will be at  %SYSTEMROOT%\debug\msert.log   which in most cases is
C:\Windows\debug\msert.log
Please attach that log with your reply.
 

We will do more later on.

Sincerely.

[Maurice Naggar]

@EthanKTM461       Hi again.   Make real sure you have seen my preceding reply, and, that you have done both procedures outlined there.

This here is meant to be done after those.    This custom script is intended to get Microsoft Windows Defender antivirus back to normal, as well as get some Windows services also set to normal,   and to do a cleanup of 'total av' if it is still there, and try to do one quick scan with Windows Defender.

 

The system will be rebooted after the script has run.

.

This custom script is for  EthanKTM461  only / for this machine only.

 
Close and save any open work files before starting this procedure. 

I am sending a    custom Fix script which is going to be used by the FRST64  tool. They will both work together as a pair.

Please RIGHT-click the (attached file named) FIXLIST and select SAVE  link AS and save it directly ( as is) to the  Downloads  folder

The tool named FRST64 .exe   tool    is already on the Downloads folder
Start the Windows Explorer and then, to the Downloads folder.

RIGHT click on  FRST64    and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.
  to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
IF Windows prompts you about running this, select YES to allow it to proceed.

IF you get a block message from Windows about this tool......
click line More info information on that screen
and click button Run anyway on next screen.

on the FRST window:
Click the Fix button just once, and wait.

 

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. This run here should be fairly quick.
If you receive a message that a reboot is required, please make sure you allow it to restart normally.
The tool will complete its run after restart.
When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run.

Please attach the FIXLOG.txt with your next reply later, at your next opportunity   

Please know this will do a Windows Restart.   Just let it do its thing.  

We will do more after this round.

Sincerely.

Fixlist.txt

[Maurice Naggar]

Good afternoon.   How is it going ?

[Maurice Naggar]

Sorry, but this is the malware-removal-help forum & each case is only for the Originator of the topic.   Help is one to one.

This Topic-thread is only for EthanKTM461.    Anyone else will be either split off or removed from this thread.

[Maurice Naggar]

Hello @EthanKTM461   I have yet to hear back from you.   Did you see my reply from 12 September ?

How is it going ?

Edited September 21, 2020 by Maurice Naggar

[Maurice Naggar]

Hello @EthanKTM461    I hope you are doing well.    Please advise if you are still with us ?

[Maurice Naggar]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks