Windows Defender Policy problem

Question

Hello there, I encountered a little problem:

1. Windows Defender does not work anymore, and it says it is disabled through group policy.
2. GPedit disappeared from my pc: it cannot be found anymore in the system folder, it cannot be found in search or launched through "run". I remember I used it like a month ago, but it disappeared.

In the meanwhile I installed AVG antivirus and well, uninstalled it already.

The result is I have windows defender blocked, and no way to modify its policy because I don't have a gpedit anymore.  How this can happen? I tried to install another group policy editor I found suggested in one of your discussion but did not help.

Any idea?

Answer 1

You should assume that malware might have locked up Windows Defender – especially if the Local Group Policy Editor has actually been removed (it’s not included in the Home Version of Windows 10). However, local administrators do have full access to the Group Policy settings via the elevated (Administrator) command prompt (just copy, paste, and run (Enter) the appropriate command line):

Determine the current status of the Group Policy registry switch for Windows Defender:

REG QUERY "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntispyware

Turn Off Windows Defender:

REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f

Turn On Windows Defender:

REG DELETE "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware

As an alternative, you can use the Turn_On_Windows_Defender.reg file provided here:

https://www.tenforums.com/tutorials/5918-windows-defender-turn-off-windows-10-a.html

Turn_On_Windows_Defender.regis a trusted file, and this is all there is to it:

Windows Registry Editor Version 5.00

; Created by: Shawn Brink

; http://www.tenforums.com

; Tutorial: http://www.tenforums.com/tutorials/5918-windows-defender-turn-off-windows-10-a.html

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender]

"DisableAntiSpyware"=-

Of course, you should also scan with this set of trusted malware-removal tools in order to make sure that the PC is clean:

Kaspersky Virus Removal Tool:

http://support.kaspersky.com/viruses/kvrt2015

Emsisoft Emergency Kit:

http://www.emsisoft.com/en/software/eek/

Malwarebytes Anti-Malware (free version only):

https://www.malwarebytes.org/antimalware/

Eset Online Scanner:

http://www.eset.com/us/online-scanner/

Some other trusted third-party malware-removal tools are listed here:

https://answers.microsoft.com/en-us/protect/wiki/protect_other-protect_scanning/list-of-malware-removal-tools/d824b9af-ebd8-4c47-94e2-8ee6c544c100

GreginMich