windows security deleted after installing cracked game

[drp]

still,same issues,

Fixlog.txt

[drp]

i think, subfolders (like platform) of windows defender in ProgramData is still empty.

and that problem that i mentioned earlier regarding wifi, after running fix scan through FSRT , i shows proper information that wifi is connected to internet or not , but when i shutdown laptop and open it again it always shows no internet. i am able to open youtube and all other things, but at taskbar, it shows no internet.

 

[Maurice Naggar]

The least important of the issues is the wifi network issue. On the Taskbar....If you don’t see one of the network icons (or a similar one) , select the Up arrowhead icon (chevron symbol)  to see if it appears there. See this Microsoft Windows 11 tip article https://bit.ly/3rJOwUw

I am assuming you have managed to manually connect to your network connection and that you are posting from the Windows 11 pc.
Just in case, here is a how to article at Lifewire
https://www.lifewire.com/connect-to-network-in-windows-11-5207081

I will be in process of reviewing your last report file and mapping out our next steps. The MS Defender & Windows Security are the top of the list.

You can obtain the latest MS Defender antivirus definitions by going to this Microsoft link
https://www.microsoft.com/en-us/wdsi/defenderupdates
Scroll down to section "Manually download the update"
Scroll down to the table
to the line "Microsoft Defender Antivirus for Windows 11, Windows 10,"

This specific machine is 64-bit, so you want to click on the column "64-bit"
Save the file first  ( keeping in mind just where it is saved)
The file is named mpam-fe.exe
Launch mpam-fe.exe to apply the update.

[Maurice Naggar]

For when you get caught up. It seems there is 1 more Windows 11 service that is missing. 

This job will run exclusively and also at the end, it will do a Windows Restart ( reboot).

Please be sure to Close any open work files, documents,  any apps you started yourself  before starting this. THIS run will do a Windows RESTART. Once it starts it will auto-close any other running app.

We will use FRST64.exe  on the Desktop folder to run a custom script.    

This custom script is for  Drp Windows 11  only / for this machine only.

• Please save the (attached file named) FIXLIST.txt   to the   Desktop   folder

Fixlist.txt       <<< - - - - -

Then, Start the Windows Explorer and then, go  to the Desktop  folder.

RIGHT click on FRST64.exe    and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.

•    If the tool warns you the version is outdated, please download and run the updated version.
• IF Windows prompts you about running this, select YES to allow it to proceed.
• IF you get a block message from Windows about this tool......

               click line More info information on that screen
               and click button Run anyway on next screen.

• on the FRST window:

Click the Fix button just once, and wait.

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. 

AFTER completion of the custom fix-job, please do this.

I would highly suggest to insure that this pc is all up-to-date with security updates & cumulative updates on Windows. select the Windows Start  button, and then go to Settings  > Update & Security  > Windows Update . and click Check for Updates.
Have much patience. 

Please attach the FIXLOG.txt with your next reply later, at your next opportunity. Be sure to let me know, How is the system at that point.

P.S. Do not do anything else on your own, except for going to Windows Defender antivirus & doing a Update run & doing a scan.

[drp]

mpam-fe.exe is not able to open. when i click it it propmt to ask if i want to run or cancel. even i click run but nothing happens.

update has error.it has new error 0X800f081f

here are logs.

Fixlog.txt

[Maurice Naggar]

Question please. Is this system on a ( Microsoft)  INSIDER version of Windows 11 ?

[drp]

no, it is  windows 11 home that came pre-installed with my new laptop

[Maurice Naggar]

This job will run exclusively and also at the end, it will do a Windows Restart ( reboot).

Please be sure to Close any open work files, documents,  any apps you started yourself  before starting this. Once it starts it will auto-close any other running app. THIS run will do a Windows RESTART.

We will use FRST64.exe  on the Desktop folder to run a custom script.    

This custom script is for  Drp Windows 11  only / for this machine only.

• Please save the (attached file named) FIXLIST.txt   to the   Desktop   folder

Fixlist.txt    <<< - - - - -

Then, Start the Windows Explorer and then, go  to the Desktop  folder.

RIGHT click on FRST64.exe    and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.

•    If the tool warns you the version is outdated, please download and run the updated version.
• IF Windows prompts you about running this, select YES to allow it to proceed.
• IF you get a block message from Windows about this tool......

               click line More info information on that screen
               and click button Run anyway on next screen.

• on the FRST window:

Click the Fix button just once, and wait.

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. 

AFTER completion of the custom fix-job, please do this.

 

On the DESKTOP you have mb-support-1.8.7.918.exe. Launch (start) mb-support-1.8.7.918.exe

Once you start it click Advanced >>> then   Gather Logs

 Have patience till the run has finished.

Upload an archive once it is done. Attach the mbst-grab-results.zip from the Desktop.

• Please attach  mbst-grab-results.zip    to your reply

[drp]

mbst-grab-results.zip

[Maurice Naggar]

( with credit to AdvancedSetup for what follows). There are adjustments that need to be made. 

Current DNS Servers: 192.168.0.1

Please consider changing your default DNS Server settings. Please choose one provider only

DNS is what lets users connect to websites using domain names instead of IP addresses

• Google Public DNS: IPv4   8.8.8.8 and 8.8.4.4   IPv6   2001:4860:4860::8888 and 2001:4860:4860::8844
• Cloudflare: IPv4   1.1.1.1 and 1.0.0.1   IPv6   2606:4700:4700::1111 and 2606:4700:4700::1001
• OpenDNS: IPv4   208.67.222.222 and 208.67.220.220  IPv6  2620:119:35::35 and 2620:119:53::53
• DNSWATCH: IPv4   84.200.69.80 and 84.200.70.40   IPv6  2001:1608:10:25::1c04:b12f and 2001:1608:10:25::9249:d69b

The Ultimate Guide to Changing Your DNS Server
https://www.howtogeek.com/167533/the-ultimate-guide-to-changing-your-dns-server/

Here is a YouTube video on Changing DNS settings if needed

Restart Windows after this has been completed. Also, today is Microsoft patch Tuesday. Keep in mind that in the afternoon of 11 OCT you should be prompted for Windows Update. I will have other tips for you later. 

Edited October 11, 2022 by Maurice Naggar

[Maurice Naggar]

Hi. For when you have some good time, give a good try to do what follows. On the Taskbar search box, type in

Windows Security

and in the results click on Windows Security. Then click on "Virus & Threat protection".  You will see a screen like this

 

Look down to "Virus & threat protection settings"

Then click on "Manage settings".   You should then see a screen like what follows

 

There you want to see that the following are ON ( choice clicked to far RIGHT side)

1. Real-time protection

2. Cloud-delivered protection

3. Automatic sample submission

4. Tamper protection

 

Edited October 11, 2022 by Maurice Naggar

[Maurice Naggar]

Hello @drp There is other work to do.

This job will run exclusively and also at the end, it will do a Windows Restart ( reboot).

Please be sure to Close any open work files, documents,  any apps you started yourself  before starting this. Once it starts it will auto-close any other running app. 

We will use FRST64.exe  on the Desktop folder to run a custom script.    

This custom script is for  Drp Windows 11  only / for this machine only.

• Please save the (attached file named) FIXLIST.txt   to the   Desktop   folder

Fixlist.txt   <<< - - - - -

Then, Start the Windows Explorer and then, go  to the Desktop  folder.

RIGHT click on FRST64.exe    and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.

•    If the tool warns you the version is outdated, please download and run the updated version.
• IF Windows prompts you about running this, select YES to allow it to proceed.
• IF you get a block message from Windows about this tool......

               click line More info information on that screen
               and click button Run anyway on next screen.

• on the FRST window:

Click the Fix button just once, and wait.

PLEASE have lots of patience when this starts. You will see a green progress bar start.  Please attach the FIXLOG.txt when done.

Now, re-check on Windows Security one more time. Hoping at that point we will see some progress.

Edited October 12, 2022 by Maurice Naggar
updated

[drp]

right now , i am away from my laptop, so it might take time in my reply but will do this tests as soon as possible

[Maurice Naggar]

Hi. No rush. I have 3 replies from before. I suggest you do them in this order. 1 , 3 , 2.

Edited October 12, 2022 by Maurice Naggar

[drp]

i completed first step, but step 3 is taking too much time.generally fixing process takes few minutes but this time, fixing process ran for so many duration and suddenly FRST closed.

[Maurice Naggar]

Regarding the fix run: It appears that it may have been timed-out at the 60 minutes-elapsed period. That is quite possible. Just please take a good look on the Desktop for Fixlog,txt and then attach it on a new Reply. I need to look that over. Much thanks.
and do try to do all the rest of my #2 reply above.
I will review the log and then map out the next approach.

[drp]

Fixlog.txt

[Maurice Naggar]

New custom run. This will do the other remaining steps; really the ones that are most important.

This job will run exclusively and also at the end, it will do a Windows Restart ( reboot).

Please be sure to Close any open work files, documents,  any apps you started yourself  before starting this. Once it starts it will auto-close any other running app. 

We will use FRST64.exe  on the Desktop folder to run a custom script.    

This custom script is for  Drp Windows 11  only / for this machine only.

• Please save the (attached file named) FIXLIST.txt   to the   Desktop   folder

Fixlist.txt  <<< - - - - -

Then, Start the Windows Explorer and then, go  to the Desktop  folder.

RIGHT click on FRST64.exe    and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.on the FRST window:

Click the Fix button just once, and wait.

PLEASE have lots of patience when this starts. You will see a green progress bar start.  Please attach the FIXLOG.txt when done.

[drp]

again the same.

Fixlog.txt

[Maurice Naggar]

New custom run. This is a shorter modified run. Regret the difficulties to date.

This job will run exclusively and also at the end, it will do a Windows Restart ( reboot).

Please be sure to Close any open work files, documents,  any apps you started yourself  before starting this. Once it starts it will auto-close any other running app. 

We will use FRST64.exe  on the Desktop folder to run a custom script.    

This custom script is for  Drp Windows 11  only / for this machine only.

• Please save the (attached file named) FIXLIST.txt   to the   Desktop   folder

Fixlist.txt <<< - - - - -

Then, Start the Windows Explorer and then, go  to the Desktop  folder.

RIGHT click on FRST64.exe    and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.on the FRST window:

Click the Fix button just once, and wait.

PLEASE have lots of patience when this starts. You will see a green progress bar start.  Please attach the FIXLOG.txt when done.

+ after this run, Please look and do as outlined here https://forums.malwarebytes.com/topic/290807-windows-security-deleted-after-virus-attack/?do=findComment&comment=1537417

 

[drp]

i tried step 2 but it still prompt for microsoft store

Fixlog.txt

[Maurice Naggar]

Open an elevated Powershell window i.e. run Powershell Prompt as an administrator .

On the Taskbar Search box, type in

powershell.exe

click the line for "run as administrator"

It is best to use the Windows Copy ( CTRL+ C )  and paste  ( CTRL+V )  for the whole line, as-is
On that Powershell prompt,  Copy & Paste this command

Get-AppxPackage Microsoft.Windows.SecHealthUI -allusers | reset-appxpackage

press Enter-key on keyboard   and watch & write down the result

+ after this run, Please look and do as outlined here https://forums.malwarebytes.com/topic/290807-windows-security-deleted-after-virus-attack/?do=findComment&comment=1537417

[drp]

it still prompt for microsoft store

[drp]

should i reset my windows? or can we use some remote desktop connection software so you can directly fix it?

[Maurice Naggar]

I do not do remote connections sessions. You can check with your computer-manufacturer support about doing a "Factory Reset" which will put the machine back to the same state that it was as it came out of the factory.  Understand that that would do away with any of your personal files or documents, etc. If you do this be sure that you have a backup of all your personal files.

Another option which may possibly be considered: Consider a operating system repair
See "Repair Install Windows 11 with an In-place Upgrade"
https://www.elevenforum.com/t/repair-install-windows-11-with-an-in-place-upgrade.418/