Share via

I accidentally installed a virus that turned my user account control off (permanently?) and deleted the windows security centre service

Anonymous
2023-04-09T02:42:02+00:00

hi, today I tried to install some software and it told me to restart my computer, I restarted it and now the user account control is off and the security centre service is off. I turned the security service back on and it says it couldn't start the service.

so then I tried forcing the service on in command prompt and It says the service is missing. I checked services.msc and it the security centre isn't there.

then I tried turning user account control back on, it is on, but when I shut down or restart my computer it turns off again. I've then tried a system restore that the software I installed made, but that didnt work.

I tried looking at other questions that other people have made and tried fixes that worked for them but none of them work, and 1 of the solutions made the situation even worse. I also tried windows update and obviously that didnt fix it either. my os is windows 11 pro 22h2. now everytime i turn my pc on it tells me to turn the service on but it literally wont start, and plus the windows security defender app wont open, it just gets stuck on a blank screen.

update, i ran sfc /scannow and now the security centre service now appears, but it wont start, now i get "error 2 the system cannot find the file specified"

update 2 i did yet another sfc /scannow, it tells me there are corrupt files but it was unable to fix it...

Windows for home | Windows 11 | Recovery and backup

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
  1. Ramesh 176.1K Reputation points Volunteer Moderator
    2023-04-09T04:51:53+00:00

    Your system is likely infected by Run.vbs or a similar malware that has wiped out the Defender-related services and the binaries. The virus and the rogue scheduled task(s) must be eliminated before restoring Defender/repairing Windows.

    Download Farbar Recovery Scan Tool (FRST64.exe) from the following link:

    https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

    • Run FRST64.exe and click "Scan".
    • Upload the two logs, namely, FRST.txt and Addition.txt, to your OneDrive and share the link here.

    3 people found this answer helpful.
    0 comments

19 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-04-09T04:49:36+00:00

    Restoring the computer back to a restore point may help fix the problem.

    Before you start, you may want to back up your information as you will lose the files from the recovery date until today.

    Here are the directions on how to reset the computer.

    1. Type the words Control Panel in the search and open the page.
    2. Find and click on Recovery.
    3. Select System Restore.
    4. Click on next.
    5. Select a system restore point.
    6. Click on Finish.

    The computer be restored to this prior date.

    Please let me know if you have any questions or concerns.

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2023-04-09T03:58:04+00:00

    Windows has a feature that allows users to scan for corruptions in Windows system files and restore corrupted files. I have enclosed the directions below. You can cut and paste the code.

    1. Type CDM in the search box. Do not hit enter.
    2. select Run as Administrator then hit enter.
    3. Then type without the quotes. "DISM.exe /Online /Cleanup-image /Restorehealth" and hit enter.

    On the same page run this scan.

    DISM /Online /Cleanup-Image /StartComponentCleanup

    Let me know if this fixes the problem.

    Cindy

    0 comments
  3. Anonymous
    2023-04-09T03:55:10+00:00

    this is the error im getting now, i checked the dcom, rpc endpoint, and remote procedures call services and they are running, but the security center service still wont start.

    0 comments
  4. Anonymous
    2023-04-09T03:44:30+00:00

    Hi,

    My name is Cindy. I am sorry you are having this problem. I know it is really frustrating. I will do my best to help you with this problem.

    Please note: This is a user-to-user community forum. We are users just like you who help others. We are not employees of Microsoft.

    Thank you for writing. The first step would be to run Malwarebytes to see if there is any virus left on the computer. There is a free version you can try.

    https://www.malwarebytes.com/mwb-download

    Once this is completed, let's try to get Windows Security Services running.

    Please type the word services in the search and open the page.

    Scroll down the page and click on the DCOM Service Launcher to open it.

    Make sure it is running.

    Do the same for the RPC Endpoint Mapper

    Do the same for Remote procedures call.

    Then scroll down the page until you see Windows Security Service. Click on it.

    Check to see if the service is now running.

    Please let me know if you have any questions.

    Cindy

    Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

    0 comments