A new Win 7 to Win 10 upgrade - Broken Defender problem

I finally bit the bullet and upgraded my Win 7 Ultimate version to Win 10 Pro 1809 yesterday. All went fine with the exception of Defender. The service IS running but I am having the problems regarding the Real-Time enabled buttons being greyed. I also cannot update definitions nor scan. I understand others have had the same issues in the past but everything I've tried has not been effective. Here is a rundown on my situation along with a list of the things I've done to fix the problem. Any additional help/tips would be appreciated.


Scenario:
Upgraded from Windows 7 Ultimate to Windows 10 Pro 1809 (10.0.17763.379)
Upgrade done using online update tool from Microsoft.
Uninstalled MS Essentials prior to install using MS Add/Remove tool
All Win 10 updates installed
My account is set to Admin level.

Problem (discovered from moment of Win 7 to Win 10 upgrade):
All Windows Defender Options Greyed out. Unable to enable Realtime Protection
Not able to run any manual SCAN option
Not able to update definitions
Firewall shows 'ON'
Checked services and Defender service IS running.
When checking Firewall settings message indicates settings do not properly match incoming rule.
Restore settings has no effect.


Attempted Solutions:
Ran MalwareBytes Premium
Ran MalwareBytes Rootkit
Ran online TrendMicro anti-virus (not installed on system - should not be interfering)
Checked Defender Polices - None present (I understand that this is the default configuration)
Suggestion to add Policy key 'DisableAntiSpyware' key performed - no effect.
Used MsConfig to boot with only MS services running (Safeboot) - Results made no difference.
Performed a System Scan (SFC using elevated privileges) - no issues
Performed a registry scan for issues - none found
Last resort - I reinstalled/repaired Windows 10 ... no luck.

Help - what else to try?

I've studied the boot logs to determine if the system is reporting any issues associated with Defender and am not sure what to look for. If anyone has any tips as to what to look for that would be appreciated.

Have you got any other AV installed as that may stop it?

The only AV that I ever had running while I was using Win 7 was MS Essentials and I removed that before I upgraded to Win 10.

Plain and simple never upgrade from a old Windows version to a newer version. Do a clean install of Windows 10.
Do your homework first and see what softwarre does and doesn't work in 10.
Then download all Windows 10 drivers for your hardware and put them on a flash drive.
Then proceed to clean installing Windows 10, then updating it, with reboots until none are found.
Then install your Windows 10 drivers with more reboots after each one.
Then end it all with software, security and game installs with more reboots after each.
Lastly then setup everything to your liking and do a system image.

1) Place the computer in clean boot:
Perform a Clean Boot in Windows 10 to Troubleshoot Software Conflicts | Tutorials

2) Post an image of any problems after placing the computer in clean boot:
How to Upload and Post Screenshots and Files at Ten Forums | Tutorials

3) Click win + r > type regedit > open registry editor > open links in this path:

a) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
look for each:
MSASCui.exe, MpCmdRun.exe or MsMpEng.exe
View the results under name, type, data
Post images of the results into the thread.

b) HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
View the results under name, type, data
Post images of the results into the thread.

4) Open administrative command prompt and type or copy and paste:
5) sfc /scannow
6) dism /online /cleanup-image /restorehealth
7) chkdsk /scan
8) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread

Thank you for lending me a hand in attempting to resolve my issue. I performed all of the tasks that you have requested. Below are the results. If there is any further information that I can provide I am certainly eager to help you , help me.

Take care -
Jim

zbook said:

1) Place the computer in clean boot:





2) Post an image of any problems after placing the computer in clean boot:




3) Click win + r > type regedit > open registry editor > open links in this path:
a) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
look for each:
MSASCui.exe, MpCmdRun.exe or MsMpEng.exe
View the results under name, type, data
Post images of the results into the thread.






b) HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
View the results under name, type, data
Post images of the results into the thread.




4) Open administrative command prompt and type or copy and paste:
5) sfc /scannow
6) dism /online /cleanup-image /restorehealth
7) chkdsk /scan
8) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread

Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.

PS C:\WINDOWS\system32> sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.
PS C:\WINDOWS\system32> dism /online /cleanup-image /restorehealth

Deployment Image Servicing and Management tool
Version: 10.0.17763.1

Image Version: 10.0.17763.379

[==========================100.0%==========================] The restore operation completed successfully.
The operation completed successfully.
PS C:\WINDOWS\system32> chkdsk /scan
The type of the file system is NTFS.
Volume label is Computer.

Stage 1: Examining basic file system structure ...
1120512 file records processed.
File verification completed.
13678 large file records processed.
0 bad file records processed.

Stage 2: Examining file name linkage ...
31915 reparse records processed.
1362794 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered to lost and found.
31915 reparse records processed.

Stage 3: Examining security descriptors ...
Security descriptor verification completed.
121142 data files processed.
CHKDSK is verifying Usn Journal...
37292672 USN bytes processed.
Usn Journal verification completed.

Windows has scanned the file system and found no problems.
No further action is required.

487472485 KB total disk space.
207788904 KB in 863409 files.
412808 KB in 121143 indexes.
4 KB in bad sectors.
1251381 KB in use by the system.
65536 KB occupied by the log file.
278019388 KB available on disk.

4096 bytes in each allocation unit.
121868121 total allocation units on disk.
69504847 allocation units available on disk.
PS C:\WINDOWS\system32>

BRKKAB said:

Plain and simple never upgrade from a old Windows version to a newer version. Do a clean install of Windows 10.
Do your homework first and see what softwarre does and doesn't work in 10.
Then download all Windows 10 drivers for your hardware and put them on a flash drive.
Then proceed to clean installing Windows 10, then updating it, with reboots until none are found.
Then install your Windows 10 drivers with more reboots after each one.
Then end it all with software, security and game installs with more reboots after each.
Lastly then setup everything to your liking and do a system image.

Wow, and to think back in July, 2015 I did it all wrong on about 6 computers running Windows 7! Some of those are now running version 1809 and have never had a clean install.... guess I need to go back and do it correctly.

These are trial and error steps to fix the firewall:

Open administrative command prompt and type or copy and paste:
a) Netsh advfirewall set currentprofile state on
b) netsh advfirewall set currentprofile firewallpolicy blockinboundalways,allowoutbound

The result if it works should appear:

Code:

C:\WINDOWS\system32>Netsh advfirewall set currentprofile state on
Ok.

C:\WINDOWS\system32>netsh advfirewall set currentprofile firewallpolicy blockinboundalways,allowoutbound
Ok.

https://support.microsoft.com/en-us/...d-of-the-netsh

View the Firewall and Network protection settings and post an image into the thread.