Cannot Enable or Update Microsoft Security Essentials

When I open my laptop I notice a red icon marked with an X for my Microsoft security essentials.  As I open it, it states "PC status is at risk because your PC isn't being monitored because the app's service stopped.  You should start it now".  When I click "Start now" button nothing happens. Also i tried to start Microsoft  Anti-malware Service from service.msc but it gave me error 1067 : the process terminated unexpectedly - Microsoft Anti-malware Services.

I am using pre-installed 64 bit windows 7 home premium, Service Pack 1. I first installed MSE in June 2012 and have been updating it regularly since then. I noticed this problem just one week back.

Any suggestions would be of tremendous help.

This problem is similar to - PC status is at risk because your PC isn't being monitored because the app's service stopped

 

Question Info


Last updated April 22, 2019 Views 1,375 Applies to:

Thank you for beginning your own new thread!

From your reply to the questions I asked someone else...

1a. (approx. date) of the purchase of the computer - April 2012 

1b. Windows 7 Home Preemium pre-installed on Dell XPS 15Z

2a.  (approx. date) of first install Microsoft Security Essentials - June 2012

2b. Intentionally choose to install MSE

2c. Microsoft Security Client created date - 24 june 2015

2d. anti malware version - 4.8.204.0

2e. engine and definition versions -  i don't know what these mean 

3. McAfee was pre-installed in this PC. Though i couldn't update McAfee because it didn't support updates through a proxy network. So I uninstalled McAfee and installed MSE.

4a. After I uninstalled the first McAfee in June 2012, I have been using MSE until my recent problem

4b. Yes, McAfee was pre-installed with my PC

5a. KB3058515, KB3033890, KB3059317, KB3057839 ,KB3063858 listed in Installed Updates - YES, ALL OF THESE

5b. How about KB3035583, KB2952664 and/or KB2990214 - YES, ALL OF THESE

6. Assuming Java is installed => Is Java Version 8 Update 45 (or higher) or Java Version 7 Update 79 (or higher) installed? - I think my java version is Version 7 Update 65 

7. Is Adobe Flash Player v18.0.0.194 (or higher) installed -  It says You have version 17,0,0,190 installed

8a. When (exact date) was Internet Explorer 11 installed according to Installed Updates- 31-DEC-2013

8b. Internet explorer's version - 11.0.2.0 (KB3058515)

8c. Is Firefox, Chrome or any other alternate browser installed - I use Chrome daily and i also have Firefox, Tor browsers installed currently and i used to have safari browser also.

9. Are you in the habit of using "Registry cleaners" (e.g., Registry Mechanic; System Mechanic; RegCure; RegClean Pro; Advanced SystemCare; Registry Booster; McAfee QuickClean; AVG PC TuneUp; Norton Registry Cleaner; PCTools Optimiser; SpeedUpMyPC; PC Doctor; TuneUp Utilities; WinMaximizer; WinSweeper; Comodo System Cleaner; Advanced System Optimizer; CCleaner's Registry Cleaner component) - I have not used any of these or other registry cleaners before.

On another note... some new executable files started appearing in program files folder in C drive (see the attached picture).. Is this the manifestation of the virus on my PC?

1. Had the preinstalled McAfee free-trial period already expired by the time you replaced it with MSE?

I've tried:

1. Re-installing MSE

2. Re-installing MSE in safe mode

3. Re-installing MSE in safe mode with networking

4. Uninstall MSE and install avast antivirus (free version) - which also could not scan my PC

5. Repair and also Re-installing avast in safe mode - which also could not scan my PC

6. running Microsoft security emergency response tool (msert) - which was able to scan my PC but did not show any infected files.

7. running msert in safe mode - which was able to scan my PC but did not show any infected files

8. running sfcscan in command prompt - which showed 2 system files corrupted and couldnot be repaired - for which i applied sfcfix patch by sysnative 

9. Re-install MSE and update using windows updates - gave error code 0x800106ba - which i tried to fix by SubInAcl tool

Source: http://answers.microsoft.com/thread/d54eab99-133d-4bd3-99cf-87315ca7f44f

2a. Did you (a) uninstall the McAfee free-trialware AND THEN (b) download/run the McAfee Consumer Products Removal Tool & reboot (c) BEFORE you first installed MSE?

2b. Did you (a) uninstall the MSE and then (b) download/run the McAfee Consumer Products Removal Tool & reboot (c) BEFORE you first installed Avast Free?

  • Fact: McAfee (and Norton) applications are notorious for not uninstalling (or upgrading) cleanly. The "leftovers" may be your troublemaker here.

3. If you open Internet Explorer (ONLY!) to this page, can you successfully install Java 8 Update 45 & remove all earlier versions (e.g., Java 7 Update 65)? => http://java.com/en/download/uninstallapplet.jsp

4. Can you successfully upgrade to Flash Player v18.0.0.194 (or higher) by opening Internet Explorer ONLY to this page? => http://www.adobe.com/go/getflash

  • BEWARE any pre-checked options to "drive-by" install unwanted, third-party software (e.g., Google Toolbar; Google Chrome)!

5. Is Firefox v38.0.5 and Chrome v43.0.2357.130 installed?

6a. Have you been updating MSE manually via downloads from the Security Portal since the 24th?

6b. When (approx. date) was the last time you ran Disk Cleanup?

6c. Is Process Hacker installed?

--
~Robear Dyer (PA Bear)
Microsoft MVP (Windows Client) since October 2002

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

1. McAfee trail period did not expire by the time I uninstalled it

2a.  I don't remember if I downloaded/run the McAfee Consumer Products Removal Tool & reboot BEFORE installing MSE. Most probably I wouldn't have done it.

2b. I did not download/run the McAfee Consumer Products Removal Tool & reboot BEFORE I first installed Avast Free?

3.  successfully installed Java 8 Update 45 & removed all earlier versions (e.g., Java 7 Update 65)  - YES

4.  successfully upgraded to Flash Player v18.0.0.194 - YES

5.  Firefox v38.0.5 and Chrome v43.0.2357.130 installed  - YES

6a. Have you been updating MSE manually via downloads from the Security Portal since the 24th - NO

6b. When (approx. date) was the last time you ran Disk Cleanup - I never used it before

6c. Process Hacker installed - NO

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Roll up your sleeves & cross your fingers...

ACTIONS

[You will want to print these instructions for offline reference.   IMPORTANT => DON'T SKIP ANY STEP & perform all Steps in one, uninterrupted session!  If a Step says to reboot, reboot! ]

1. Right-click on the following link, select SAVE TARGET AS... & download the McAfee Consumer Products Removal Tool, saving it to your desktop: http://us.mcafee.com/apps/supporttools/mcpr/mcpr.asp

2. Close all open applications (i.e., anything with an icon on the taskbar).

3. Right-click on the file you saved in Step #1 above and select Run as Administrator to run the McAfee utility. Don't TOUCH your keyboard until the run completes, then reboot.

4. Re-assert Internet Explorer as the default Browser in the CUSTOM (<=important!) section of Set Program Access and Computer Defaults. [1]

5a. Right-click on the following link and SAVE the download to your desktop: http://www.slipstick.com/doit/chromehtml.reg [2]

5b. Double-click on the file you saved in #5a above & accept the prompt to MERGE the data with the Registry.

6. Reset Internet Explorer per the instructions on this page => http://windows.microsoft.com/en-us/internet-explorer/reset-ie-settings

    Note=> For optimal results, check the Delete personal settings option.

7a. Open Internet Explorer (only!) to http://windows.microsoft.com/en-us/windows-vista/windows-update-error-8000ffff [ignore the title & references to Vista].

7b. Ignoring any "Not recommended" or similar warnings, run Fix It (#50202) in DEFAULT and then AGGRESSIVE modes. [3]

8. Reboot one last time.

9. Run Disk Cleanup making sure the Temporary files option is checked.

10. Test MSE functionality (e.g., run a manual check for updates via the Update button on the Update tab.

11. Reply to this post with a status report & tell me what Definitions version is displayed in MSE's Update tab now. Also tell me if those mysterious orphaned files are still present on your C:\ drive?

Good luck!

===========================================================
[1] After we've finished this thread, feel free to reassert one of your alternate browsers as your default, if you wish.

[2] Trusted Source: http://www.slipstick.com/problems/this-operation-has-been-cancelled-due-to-restrictions/

[3] Full Disclosure: Running the Fix It in AGGRESSIVE mode will delete your Update History but not the list of Installed Updates.

--
~Robear Dyer (PA Bear)
Microsoft MVP (Windows Client) since October 2002

1 person was helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Let's check something very basic first.

Right click the clock in the system tray. Select Adjust Date and Time.

Verify and correct the month, day, year, hour, minutes and time zone.

Reboot if you changed any of the above.

-steve

^_^
Windows Insider MVP (Security), Moderator Microsoft Community

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Hi,

I checked the time and date settings - everything was fine.

I followed all the steps in the respective order mentioned.

But i am still unable to start the real time protection in  MSE.

Update tab is still passive so i cannot see the definitions version.

The mysterious orphaned files are still there and they appear to be more in number now - 87 files when compared to 24 files by the time of last post.

Any new insight into the problem now?

Thank you for all your effort.

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Unfortunate that my stab in the dark for date/time was a miss.

Can you right click one or more of those newly appearing files and select properties? Do any of the tabs reveal anything?

I'm hesitant to focus on an infection, but...

Try Hitman Pro Trial Version: http://www.surfright.nl/en/hitmanpro This program may be run from a flash drive.

And/or

Try TDSS Killer: http://www.bleepingcomputer.com/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller TDSS Killer may be run from a flash drive.

 

You may wish to download (on an uninfected PC) one or more of the following rescue scanners to create bootable media to scan the infected PC (list courtesy of forum member, GreginMich):

http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline

http://support.kaspersky.com/us/viruses/rescuedisk

http://www.f-secure.com/en_EMEA-Labs/security-threats/tools/rescue-cd/

http://www.bitdefender.com/support/How-to-create-a-BitDefender-Rescue-CD-627.html

http://www.avira.com/en/support-download-avira-antivir-rescue-system

http://www.avg.com/us-en/avg-rescue-cd-download

http://www.freedrweb.com/livecd/

http://www.superantispyware.com/portablescanner.html

http://support.kaspersky.com/faq/?qid=208283363

http://www.eset.com/int/download/utilities/detail/family/239/

Each rescue scanner will miss things – because none of them will have a perfectly complete and up-to-date set of definitions; so you might need to use several of these rescue scanners, or something like the Shardana Antivirus Rescue Disk Utility, which creates a custom bootable CD or flash drive that includes multiple rescue scanners:

http://www.sarducd.it/ -- be sure to decline all of the additional junk being offered when you install the download for SARDU. I tested this install recently and the first offer was for the hated and difficult to remove Delta Search Toolbar.

Another boot CD (similar to Shardana) to consider is Hiren's Boot CD.

-steve

^_^
Windows Insider MVP (Security), Moderator Microsoft Community

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Hi,

I feel that the appearance of .exe files in program files folder is because of malware present on my PC.

These are screenshots of properties window of new .exe files appearing in program files folder.

Does that reveal any info about the kind of malware involved. Though it says processhacker.exe i never installed process hacker software.

Finally,

I registered at spywarehammer seeking the help of knowledge expert for removal of malware.

They suggested to follow advice of only ONE of the help forums at a time. I'll continue to update this thread on my progress in removal of malware and getting MSE running (as it may be helpful for others having similar problems). But I'll be following the instructions by spywarehammer.

Thank you for all of ur suggestions till now, especially PA Bear and Stephen Boots. 

Any suggestions are always welcome.

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Good morning I am having the same problem. Same basic computer. No McAfee. All was fine until two nights ago when I tried to uninstall SpyBot.  After doing so my computer started acting funny would not load things like Facebook. Tried to restore and then the fun really began. Norton said it was messed Told me to reinstate after a restore, so I did. Said it could not because of Essentials, remove it. SO I tried, can not do so. Will update, ran scan, found nothing but am getting period timed out error code 0x80070564   To top it all off when I click on help I get a warning that the site is not safe. :>(  Will not allow me to start retime or remove . Help please.

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Judging by your thread in SpywareHammer forums, it looks like you're seeing the effects of a massive, ongoing malware infection!

You should not have Adobe Flashplayer plugin for Internet Explorer v17.0.0.190 & v18.0.0.194 both installed!

--
~Robear Dyer (PA Bear)
Microsoft MVP (Windows Client) since October 2002

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Good morning I am having the same problem. Same basic computer. No McAfee. All was fine until two nights ago when I tried to uninstall SpyBot.  After doing so my computer started acting funny would not load things like Facebook. Tried to restore and then the fun really began. Norton said it was messed Told me to reinstate after a restore, so I did. Said it could not because of Essentials, remove it. SO I tried, can not do so. Will update, ran scan, found nothing but am getting period timed out error code 0x80070564   To top it all off when I click on help I get a warning that the site is not safe. :>(  Will not allow me to start retime or remove . Help please.

Which is it? Norton and Microsoft Security Essentials? What program gives you the error?

Please start your own new question with details about your system and the problem you are encountering.

http://answers.microsoft.com/en-us/page/faq#faqAskQuestion1

How to ask a question in forums:

http://support.microsoft.com/kb/555375

^_^
Windows Insider MVP (Security), Moderator Microsoft Community

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.