Okay so not a proper solution but for anyone struggling with this in the future:
What Microsoft IT says that if the sfc and the DISM both fails than the system files are already corrupted and the easiest fix for it to perform an Upgrade Install, which will keep all personal files and requires no product key or activation.
Just pop in your WIN10 ISO and select upgrade install.
Hey SageofRage,
Since your considering an Upgrade Install, you might want to try FixWin for Win10. It's got an option under it's System Tools to repair/reset Windows Defender. I've never used it, but don't think it would hurt anything at this point :)
http://www.thewindowsclub.com/fixwin-for-windows-10
I wanted to reply on how to fix this. I scoured the internet, no one had an answer besides in-place windows repair.
Basically Windows Defender Service gets deleted and you need to reinstall it. In windows 10, you can only fix in Safe Mode.
THIS FIX TESTED ON WINDOWS 10 v1909 (18363.720)
Here is what happened:
· Installed Malware.
· Malware set the next boot to boot into safe mode
· Restarting computer booted into safe mode, then immediately restarted. (During that time, a malware script ran deleting multiple services (Windows Defender, Malwarebytes, disabling Firewall in Registry).
Symptoms:
· Windows Defender not showing in task manager
· Windows Defender - In Settings, there is a button to "Restart Now", after pressing the button you get a message saying "Unexpected error. Sorry, we ran into a problem. Please try again."
· Trying to start services manually for "Windows Defender Advanced Threat Protection Service" & "Windows Defender Antivirus Network Inspection Service" gives an error of "service on Local Computer started and then stopped. Some services stop automatically if they are not in use by other services or programs."
· Windows Defender Antivirus service is missing
· WinDefend registry key is missing from Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
· Windows Firewall Disabled - Cant Start, Cant start service, Startup Type Grayed out
Common suggestions that do NOT work
- Running SFC /scannow
- Running dism /online /cleanup-image /restorehealth
- Going into registry and changing Computer\HKEY_LOCAL_MACHINE\Policies\Microsoft\Windows Defender\ à DisableAntiSpyware from 1 to 0
- Ton of other suggestions
HOW TO FIX:
- If you have Malwarebytes, trying to start it will give you the “Unable to connect the Service” error. Uninstall and reinstall it. Run a scan and clean system.
- Check your Windows system time and fix it.
- Fixing Windows Firewall:
- Go to Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpssvc
i. Change Start from 4 to 2
ii. Start the service and set service to automatic
- Download this registry replacement.
- If you try to import, you will receive an error of “Cannot Import” “Error accessing the registry”
i. No permissions will fix this issue.
- Press Run, enter msconfig, go to the Boot tab, under boot options, select Safe Boot
- Boot into safe mode, now import the WinDefend.reg
- Go back into msconfig and turn off of restart no normal mode
Windows Defender should be back to normal now. Hopefully this saves someone tons of time.
Yes, this does fix the problem, but with a caveat that I had to modify the registry to match my version of Windows Defender Service that was installed/updated. After you import the registry file in Safe Mode, you need to make sure that the version is correct for 2 entries in the registry. While in Safe Mode, locate your version of Windows Defender Service executable. The path on my system is located in a hidden directory:
My version, and the MsMpEng.exe was found under a folder 4.18.2006.10-0Code:C:\ProgramData\Microsoft\Windows Defender\Platform
The registry entries to modify are located at:
Then change the values found under the two following keys to correctly reflect the version (right-click, choose modify) and replace existing versions with the correct matching versions, for example:Code:Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend
FailureCommand -> CAMP=4.18.2006.10
ImagePath -> 4.18.2006.10-0
Close the registry and reboot into normal mode and it will all be back to normal.
A combination of ImpetuousRacer and jfogle67's above comments actually WORKED and got my Virus and Threat Protection functional again in Windows Defender. I spent 14 hours screwing with the computer before finding this thread. Wish I found it at least 7 hours ago . . lol. Thanks guys!!
I'll bookmark this so I can resolved if this issue happen again in the future. Thanks you guys!
may i ask what games/software you have installed lately? i m trying to figure it out where the malware is. ty.
Sort of an understatement, but perhaps you'd find Macrium Reflect helpful.I'll bookmark this so I can resolved if this issue happen again in the future. Thanks you guys!
Quote
