Share via

Windows Defender Real Time Protection, toggle button disabled

Anonymous
2021-10-23T13:40:56+00:00

So, my windows real time protection is currently turned off and it seems like the toggle button is blocked. I wanna turn it back on. There aren't any security providers within my device and it is all up to date. How could I fix this?

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

Answer accepted by question author

  1. Anonymous
    2021-10-24T22:31:58+00:00

    Hi Julian,

    If I understand correctly, you have determined that both of the Services are missing.

    I've never seen this before, but there is a first time for everything.

    Surely some form of malware caused this situation. If you know when the failure actually

    occurred, Paul's suggestion for a System Restore is feasible. However, I doubt that you

    became aware of this problem, anywhere near the time that it occurred. And you should

    not restore your System, back to a distant time. You lose all that has occurred in the interim.

    To eliminate the possibility that malware might still be involved, you should download a

    free copy of MalwareBytes from MalwareBytes.com, and scan with it. Set it to Scan for

    Rootkits, and allow it to clean all that it finds.

    There are two ways to retrieve the missing Services. You can download a copy of each,

    and merge them into your Registry, or you can perform a Repair Upgrade. The Upgrade

    completely replaces your W10 OS, but retains your Apps & Files. Leaving your PC intact.

    Both procedures are described below. You decide which is best for you.

    To perform a Repair Upgrade, you Download the Tool from

    https://www.microsoft.com/en-us/software-download/windows10

    This procedure is very safe, if the configuration of your PC is HDD only, or SSD only.

    The combination of HDD + SSD has been problematic in the past, but very rarely.

    If that is your configuration, it is prudent to create a System Backup before proceeding.

    Right click the downloaded file and select "Run as Administrator".

    Choose "Upgrade This PC Now", and the procedure will begin.

    Answer the questions logically, and when asked "What to keep", ensure that both the

    OS and Apps & Files are selected.

    The procedure will run for about an hour, and your PC will restart several times.

    Sometimes it appears to be doing nothing, but be patient, and do not disturb it.

    When it is finished, your sign in screen will appear. Sign in and you should find that

    your PC is intact, with all your information.

    Replace The Services

    If you prefer to not completely replace your W10 OS, instructions for replacing the services

    follow. First, determine the current version of your AntiMalware Platform.

    Open File Explorer and click the View Tab. Check the box for "Hidden Items". Then

    Navigate through Explorer C:\ProgramData\Microsoft\Windows Defender\Platform.

    Write down the latest Version Number in this folder. For later use.

    Merging the Services is less intrusive to your OS, but requires slightly more involvement

    on your part. If you elect to replace the Services, you begin by downloading Windows

    Security Service (SecurityHealthService) and Microsoft Defender Antivirus Service

    (WinDefend) from here https://www.tenforums.com/tutorials/57567-restore-default-services-windows-10-a.html

    SecurityHealthService will merge into the Registry as it is. No modification is necessary.

    After merging WinDefend, the key must be modified to address the current version of

    the installed Antimalware Platform. A simple modification. Which I will explain later.

    The Services show up on your PC as .reg files. To merge them into your Registry you just

    double click them. However, before doing that, you must boot your PC into Safe Mode.

    (Settings> Update & Security> Recovery> Advanced Startup> Troubleshoot> Advanced

    Options> Startup Settings> Restart Type 5 Come up in Safe Mode.)

    After you are finished merging the Services, just reboot into Normal Boot.

    After merging the Services, you should be able to find their Registry Keys, now. Find

    them using the same procedure that I described in my previous post on 10/24.

    You will need to make a modification to WinDefend. Select it and find Image Path

    in its right pane. Right click Image Path and choose "Modify". Use the arrow buttons

    on your keyboard to navigate the sub-key. Replace the "Version" number in the sub-

    key, with the one that you previously obtained from ProgramData.

    Exit the Registry and Restart your PC.

    The Services should now be present.

    Good luck, Glen ****

    1 person found this answer helpful.
    0 comments No comments

8 additional answers

Sort by: Most helpful
  1. Anonymous
    2021-10-24T04:48:15+00:00

    Hi Julian,

    Why don't you find out a little more information regarding your problem.

    To determine the status of Defender, use Windows PowerShell (Admin) to display it.

    Copy this Cmdlet.

    Get-service -name "WinDefend", "SecurityHealthService", "wscsvc", "mpssvc" | Format-Table -auto

    Then open Windows PowerShell (Admin) by right clicking the "Start" logo, and select it from the list.

    Right click on the blinking System32 cursor, and the Cmdlet will populate. If it does not run

    automatically, hit <enter>.

    All four of the Services listed, must be running. Please report any that are not.

    Then,

    Copy this Cmdlet

    Get-MpComputerStatus

    Right click the blinking cursor, to populate the Cmdlet. If it doesn't run automatically,

    hit <enter>

    In the list that is presented, observe the status of Defender.

    If no other anti-virus program is affecting Defender, the only one with a status of False

    should be "IsVirtualMachine". Please describe any other, with the False status.

    This will help in defining your problem.

    Type exit and hit <enter> to leave PowerShell.

    Glen

    0 comments No comments
  2. Anonymous
    2021-10-24T01:00:16+00:00

    I did install a 3rd party antivirus but I have uninstalled it months ago. I've tried the command and its still not fixed.

    0 comments No comments
  3. Anonymous
    2021-10-23T17:21:14+00:00

    always thats i dont have antivirus protect

    0 comments No comments
  4. Anonymous
    2021-10-23T14:21:22+00:00

    Hi Julian,

    I'm Paul and I'm here to help you with your concern.

    Did you install a 3rd-party Antivirus program?

    Anyway, please try this command.

    1. Open Command Prompt as Admin.
    2. Copy-paste and enter the command below.

    REG DELETE "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware

    0 comments No comments