This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 14.000000000000002%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAT%3C/text%3E%3C/svg%3E)
So, a few days back I realized that my windows security wasn't on so I decided to turn it on, but it just wouldn't. Whenever I clicked on the windows security option through search or settings the window would open and close immediately.
I searched online for workarounds, but I can't seem to find anything except some old post where the guy was asked to download "Malwarebytes" and apparently his problem was solved.
I did the same and it returned with a huge number "Web Quarantines" or something of something like "aspnet_compiler.exe" which is somewhere in the Microsoft.NET Framework folder, it would come up every other second, then it also showed some threats like "Potentially unwanted modification" or something where I saw a registry entry which had "DISABLE SECURITY CENTER" if I remember correctly. I decided to quarantine it and reboot my laptop, but it won't work even now.
I am not too tech savvy and the games I have on my laptop (mentioning this because that old post mentioned some cracked games) are from epic games and ig only a few were downloaded from fit-girl repack but that was like a long long time ago and I believe my defender was working at that time ago.
Also, there were some "loader.vbs" files which were quarantined by Malwarebytes. I tried resetting my laptop, but it didn't work.
Can someone please help me with this problem!
Solution is in the final comments of the "Accepted Answer"
Answer accepted by question author
Open Windows Powershell.
Copy and paste in the following command > press enter.
gsv dosvc, mpssvc, SecurityHealthService, usosvc, WdBoot, WdFilter, WdNisDrv, WinDefend, wscsvc | ft -auto Name, DisplayName, StartType, Status
Post a screenshot of the output.
Hey! Thanks for replying! here is your image
Thanks. Malware has completely deleted Windows Defender. To ensure that there's no further malware, please provide Farbar Recovery Scan Tool (FRST) logs for analysis.
https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/
Note: If you are using Edge or Chrome, SmartScreen may initially block the download. Click on the three dots next to the warning and select Keep => Show more => Keep anyway.
https://1drv.ms/t/c/cd189435fe0b0500/EXCjKWRX7mJHnITDbWoyUQ4BFiWi3EIFQSUo-eVIptbTxA?e=vCKXTU
Here is the link you asked for, I think I've uploaded them right
I also keep getting such notifs from Malwarebytes
That's Addition.txt. I also need FRST.txt. Thanks.
https://1drv.ms/t/c/cd189435fe0b0500/EbylZw6mSbRPrMBNYg6sp94BISmdNQxl_sJ60fc7nx8Qww?e=DPc1FL
Here, I guess this is the one
Did you receive it? I hope you did, cuz this is all too new for me lol
Yes. Preparing a fixlist.
If you have a Malwarebytes trial activated, unregister it in the security center, so that Windows Defender's real-time protection will be enabled when the services are restored.
This may take a while as the System File Checker will run at the start of the fix.
Please upload Fixlog.txt.
Alright! I'll do this and let you know what happens
https://1drv.ms/t/c/cd189435fe0b0500/EcV3NnLG0klPjQMDghfACb4B1DQY7WlLxmZ7Me80z9ERyw?e=P9VPWm
Here is the FixLog.txt
After the reboot- Windows security opened properly and shows like this
A notification arrived telling me to turn on virus protection, clickng on it it showed me this
I don't have any IT helpdesk cuz it's my home laptop.
Also, what stuff do you think I must do now so that the malware or anything does not return?
This is what it shows in the virus protection and threat protection after going into it from settings
Some of the security health files have been deleted.
Download ExecTi -
Download this zip file -
https://drive.google.com/file/d/1DCu2W08uwaSvPvILMYXVJ-PvBnSKWQja/view?usp=sharing
Unzip the folder then move it to the root of your 'C' drive.
Run ExecTi and enter cmd.exe where it says Open then click OK.
Copy and paste the following command into the Command Prompt window > click enter.
xcopy "C:\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\*" "C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\" /s /e /h /i /y
Let me know if there's still any problem.
Download the following two files, right click each and run as administrator. That should bring WD up to date.
Ummmm, so after trying all the above said tweaks, this is the result while opening windows defender or security
Open an admin Windows Powershell and run:
Get-AppxPackage *SecHealthUI* -allusers | % {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppxManifest.xml"}
Let me know if it throws an error.
Then run:
Post the output.
First line just ran normally ig, here's the ss
It's probably easiest at this point to perform a repair installation.
Go to: https://www.microsoft.com/en-au/software-download/windows10
** If the option to Keep personal files and apps is greyed out, abort the installation
Will this remove the installed apps? and if so then which ones?
I think that whatever the problem is, it might be in the C directory or the partition where I have my games installed (C and Games directory are of the same Disk) while I have another 1 tb HDD which only has programs and files- NO app installations, etc. Can I clean the Games directory and back it up in my HDD and then can I like somehow format C and Games partition and get a clean windows installation?
Try a repair installation first.
As long as the 'Ready to Install' screen looks the same as the picture in my previous post, all your apps and personal files will be retained.
Alright! I'll let you know what happens
Will my saved passwords in microsoft edge be lost too?
No they will not be lost.
Hey!!! I did it, windows re-installed properlyand security is working fine, my apps are there and everything is working- only problem ig is that the display colours are all bland right now- but I'll try to see what I can do about it
Can you give me any advice of what I need to do now? like any post-install tips or things I need to know?
Maybe turn on PUA detection in Windows Defender.
From an admin Windows Powershell run: Set-MpPreference -PUAProtection 1
There's a folder Windows.old at the root of your 'C' drive. That's your previous Windows Installation. If there's anything missing in the new installation (there shouldn't be), it will be in there.
You can remove the Windows.old folder using Disk Cleanup or Storage Sense. It should be listed as something like 'Previous Windows installations'. It will be automatically deleted after around 10 days.
Ummm, one last thing! I've been getting this warning from defender
What actions does it show if you click the drop arrow?
Open Powershell, copy/paste the following code and click enter:
Get-Item C:\Windows\Windows.exe
What is the result?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(316.8, 28.000000000000004%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAG%3C/text%3E%3C/svg%3E)
my problem is windows security blank screen, and because smart app control i can't run program or install program, i can't turn off smart app control because my winsecurity can't open
Thank you for the screenshot.
The next option is to download the Microsoft Safety Scanner and run a full scan with that, to ensure your system is malware free and that may also resolve the problem with the Windows Security service.
https://learn.microsoft.com/en-us/defender-endpoint/safety-scanner-download
Thank you for the screenshot, open the Registry Editor again, it will still be on the same page.
Right click and delete the blue entries indicated below.
Then restart (not shut down) your PC to apply the changes.
Alright! I'll try and let you know what happens! btw, if you want I have the link of the earlier question I saw for a possible answer
Okay, please delete those entries and restart your PC and then please let me know the result.
Unfortunately, the problem still persists :(
Click your Start Button, type regedit and hit Enter to open the Registry Editor.
Click View and make sure 'Address Bar' is turned on.
Paste this into the Address Bar at the top and hit Enter.
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender
Please provide a screenshot of that Registry Editor page.
Hey! Thanks for replying! here is the image you requested