Jump to content

Windows Defender disappeared


Recommended Posts

Hello my name is Dinos I have a problem with my computer. I recently tried to install an untrusted application. Big mistake. Windows defender said it was ransomware and malware I tried removing it but windows defender wouldn’t do anything. I started to panic and quickly installed avast antivirus. Avast quarantined the virus but now I don’t want avast and I want windows defender back. I uninstalled avast but windows defender was nowhere to be found all the settings where empty, even after i restarted. So I had no choice to install avast again for protection. Can someone help me install windows defender again?

Thank you.

 

Link to post
Share on other sites

Hello @HikaruDinos:welcome: I will guide you. Know that having installed Avast ( or any 3rd party antivirus ( a non-Microsoft) Windows Defender is turned off. That can be over-come, We will need a series of procedures. 

In order to begin to help you properly, I will need a diagnostic report in order to review & diagnose.
Specifically the FRST Farbar diagnostic report.  It is safe to get & use. Be very sure you SAVE it first.
https://support.malwarebytes.com/hc/en-us/articles/360039025013-Run-Farbar-Recovery-Scan-Tool-to-gather-logs

Attach FRST.txt + Addition.txt with your reply.  You may if you wish, ZIP the 2 into a zip file & then attach.
{ just please do not copy, paste their contents in main body of reply box here.)
 

Link to post
Share on other sites

It may well be that Windows Smartscreen protection is interfering with or falsely blocking the FRST. 

  • IF you get a block message from Windows about this FRST tool......

               click line More info information on that screen
               and click button Run anyway on next screen.

Link to post
Share on other sites

The following are a set of steps to be done so that Microsoft Defender is turned back ON. Please do these in order listed. Take your time.
To fully remove AVAST antivirus, first Uninstall it the standard Windows way.
See "OPTION THREE" on this guide https://www.tenforums.com/tutorials/4689-uninstall-apps-windows-10-a.html#option3

You want to uninstall "Avast Free Antivirus"
ALSO, you need to uninstall "BONJOUR"  ( that you do not need)

[   2    ]
Keep going and do this.

Then get & first SAVE & then run the AVASTCLEAR tool
Get, Save & Run the Avast clear tool.
https://support.avast.com/en-us/article/Uninstall-Antivirus-Utility/
Save the tool first; then run it.

[   3   ]
Then do a Windows RESTART  from the Start menu.

[   4   ]
Run this procedure.

This custom script is for  HikaruDinos  only / for this machine only.

Be very sure to Save any work-files you have open at this point. Close & Save any open edits, if any. Next, a custom script to do  checks & some  cleanups. 

We will use FRST64  on the Downloads  folder to run a custom script.    The system will be rebooted after the script has run.

NOTE-1:  This script will  check on Microsoft Defender & make sure it is up-to-date & do one Quick Scan. It will also get a status check on services.

Please be sure to Close any open work files, documents,  any apps you started yourself  before starting this.

  • Please save the (attached file named) FIXLIST.txt   to the   Downloads   folder

Fixlist.txt       <<< - - - - -

Then, Start the Windows Explorer and then, go  to the Downloads   folder.


RIGHT click on FRST64  and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.
  to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
IF Windows prompts you about running this, select YES to allow it to proceed.

  • IF you get a block message from Windows about this tool......

               click line More info information on that screen
               and click button Run anyway on next screen.

  • on the FRST window:

Click the Fix button just once, and wait.

frst-fix.jpg.f6a25291b39a03d418acc9a3b7136900.jpg

 

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. 
If you receive a message that a reboot is required, please make sure you allow it to restart normally.
The tool will complete its run after restart.
When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run.

Please attach the FIXLOG.txt with your next reply later, at your next opportunity. Stick with me.

Edited by Maurice Naggar
updated
Link to post
Share on other sites

Thank you. A good run. We do need to make a follow-up. Please do these next steps. 

Please  set File Explorer to SHOW ALL folders, all files, including Hidden ones.  Use OPTION ONE or TWO of this article
Please use thuis guide https://www.tenforums.com/tutorials/7078-turn-off-show-all-folders-windows-10-navigation-pane.html

Then, next: 

Run this procedure. This one will be quicker that the last run.

This custom script is for  HikaruDinos  only / for this machine only.

Be very sure to Save any work-files you have open at this point. Close & Save any open edits, if any. Next, a custom script to do  checks & some  cleanups. 

We will use FRST64  on the Downloads  folder to run a custom script.    The system will be rebooted after the script has run.

NOTE-1:  This script will  re-check on Microsoft Defender & make sure it is up-to-date & do insure one old exclusion path is removed from exclusion.

Please be sure to Close any open work files, documents,  any apps you started yourself  before starting this.

  • Please save the (attached file named) FIXLIST.txt   to the   Downloads   folder

Fixlist.txt      <<< - - - - -

Then, Start the Windows Explorer and then, go  to the Downloads   folder.


RIGHT click on FRST64  and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.
  to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
IF Windows prompts you about running this, select YES to allow it to proceed.

  • IF you get a block message from Windows about this tool......

               click line More info information on that screen
               and click button Run anyway on next screen.

  • on the FRST window:

Click the Fix button just once, and wait.

frst-fix.jpg.f6a25291b39a03d418acc9a3b7136900.jpg

 

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. 
When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run.

Please attach the FIXLOG.txt with your next reply later, at your next opportunity. Stick with me.

Link to post
Share on other sites

Hello @HikaruDinos 

The first custom fix run did find a few leftovers from Avast and removed them. (and that was even after I had you run the AVASTCLEAR tool.)
The first custom fix run did run a check with the Windows System File Checker (SFC). That made some system corrections.
I expect that Microsoft Defender antivirus is ON, enabled and protecting after that first run.
Please be sure you do the 2nd fix script I posted ( before) https://forums.malwarebytes.com/topic/287202-windows-defender-disappeared/?do=findComment&comment=1518522
Also note, we have more to do. We need to check on the Microsoft Windows Update service.

 

Link to post
Share on other sites

You ran the same fix that was completed the first time. I intended to run the 2nd one I sent. Let us do this.
Find and delete on the Downloads folder the file-named Fixlist.txt
That is important.
You need to save this new one here to Downloads folder

Fixlist.txt

hen, Start the Windows Explorer and then, go  to the Downloads   folder.


RIGHT click on FRST64  and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.
  to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
IF Windows prompts you about running this, select YES to allow it to proceed.

  • IF you get a block message from Windows about this tool......

               click line More info information on that screen
               and click button Run anyway on next screen.

  • on the FRST window:

Click the Fix button just once, and wait.

frst-fix.jpg.f6a25291b39a03d418acc9a3b7136900.jpg

 

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. 
When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run.

Please attach the FIXLOG.txt with your next reply later, at your next opportunity. Stick with me.

Link to post
Share on other sites

Thank you for the report. That is the right one. At this time, please do this report too, 

Download   Farbar's Service Scanner utility

and Save to your Desktop.

Right-Click on fss.exe and select Run As Administrator.

Answer Yes to ok when prompted.

If your firewall then puts out a prompt, again, allow it to run.

Once FSS is on-screen, be sure the following items are check-marked:

  • Internet Services
    Windows Firewall
    System Restore
    Security Center/Action Center
    Windows Update
    Windows Defender
    Other services

  

Click on "Scan".

It will create a log (FSS.txt) in the same directory the tool is run.   Please attach that file. 

Link to post
Share on other sites

Alright. Things are better. 🙂Looks like Microsoft Defender is ON. 😀 Please do these 2 procedures, now.
[ 1 ]
I would highly suggest to insure that this pc is all up-to-date with security updates & cumulative updates on Windows. select the Windows Start  button, and then go to Settings  > Update & Security  > Windows Update . and click Check for Updates.
Have much patience.
[ 2 ]
After that

Do a custom scan with Microsoft Defender Antivirus:

Just want to do a visual check in Windows Security to see (visually) that Microsoft Defender is on , and to do a Custom scan.

From the Windows Start menu, select Settings, then select Update and Security.

Next, look at the left-side menu & select Windows Security

Next, In Windows Security section: Click on the grey button Open Windows Security

Now, click on the shield Virus and threat protection

Look to see that Microsoft Defender is shown & available for use.

On the next display, look at all the options.  Look down the list and see "Check for Updates" .

You should click on that to have the system check for updates for Windows Defender.  Watch & wait for that to complete.

Please also note that the Scan options (all) can be displayed by clicking on Scan options.   Click that & select CUSTOM scan & then pick the C drive  & have it go forward.

Once it has started the scan phase, you can go take a long break.   Let me know the results.

Link to post
Share on other sites

Next step is to   get  4 Registry files for 4 Windows Services.

Securityhealthservice 

Windefend. ( Microsoft Defender Antivirus service )

Windows Update Service 

Windows Security Center service

.

RIGHT click the link with your mouse-pointer and select SAVE ...link as.... & guide the folder for saving to a folder ( do not double click / do not 'run' the file / nor open

Windows 10 Windows Update service

Once it is saved, then we are needing to merge the files onto the system, as follows

 

With you mouse, do a RIGHT-click on the file wuauserv.reg and select Merge

Let it do that & insure it finishes ok.

.

Now need to do similar download, save, Merge for each of the other 3 services.

 Microsoft Defender Antivirus service 

Save, then Merge Windefend.reg

.

Windows 10 Windows Security Center service

Save, then Merge Wscsvc.reg

.

win 10 SecurityHealthService 

Save. Then do a Merge with this reg file.

[ NEXT ]

Now do a Windows RESTART.

After Windows is restarted, just please take a visual look at the display of Windows Security.

Edited by AdvancedSetup
Corrected font issue
Link to post
Share on other sites

Hello. I got your note saying that you re-installed Windows OS & that things are good. I am relaying some advice for pc safety and security. 

Consider using PatchMyPC, keep all your software up-to-date - https://patchmypc.com/home-updater#download

Keep your system and programs up to date. Several programs release security updates on a regular basis to patch vulnerabilities. Keeping your software patched up prevents attackers from being able to exploit them to drop malware.

SAFETY TIPS:

Backup is your best friend.  Keep backups of your system on a regular basis to offline storage & keep those safe. https://forums.malwarebytes.com/topic/136226-backup-software/

It is not enough to just have a security program installed. Each pc user needs to practice daily safe computer and internet use.

Best  practices & malware prevention:
Follow best practices when browsing the Internet, especially on opening links coming from untrusted sources.
First rule of internet safety: slow down & think before you "click".
Never click links without first hovering your mouse over the link and seeing if it is going to an odd address ( one that does not fit or is odd looking or has typos).

Free games & free programs are like "candy". We do not accept them from "strangers".

Never open attachments that come with unexpected ( out of the blue ) email no matter how enticing.
Never open attachments from the email itself. Do not double click in the email. Always Save first and then scan with antivirus program.

Pay close attention when installing 3rd-party programs. It is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed.
Take great care in every stage of the process and every offer screen, and make sure you know what it is you're agreeing to before you click "Next".

Use a Standard user account rather than an administrator-rights account when "surfing" the web.
See more info on Corrine's SecurityGarden Blog http://securitygarden.blogspot.com/p/blog-page_7.html

Only using the Standard-access-level user account when surfing and downloading / installing would have been a tremendous way to prevent the infections of this machine.


Don't remove ( or change )  your current login. Just use the new Standard-user-level one for everyday use while on the internet.

 

Keep your system and programs up to date. Several programs release security updates on a regular basis to patch vulnerabilities. Keeping your software patched up prevents attackers from being able to exploit them to drop malware.

For other added tips, read "10 easy ways to prevent malware infection"  

Stay safe.

  • Like 1
Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.