Windows 10: Malware disabled (or removed) Windows Defender

Here's what happened: i started my laptop normally and i went AFK for a while, the fan went full power, it was weird because I've never heard it going so fast, so I opened task manager to search for the culprit and the fan went slow again, I IMMEDIATELY thought "cryptominer", so i tried to open windows defender but it wasn't on the icon tray, so i searched for it, and the Windows Security app was blank, went on settings and it said there was no antivirus provider (See image 1).
Downloaded Malwarebytes did a quick scan, and yep, Trojan.BitCoinMiner indeed. (See pastebin link for full scan report). Now that I've dealt with the malware, i want to get windows defender back, because if you look on the scan report, there are also 3 PUM, all done to the registry (i think): "PUM.Optional.DisabledSecurityCenter...".

Here's what I've tried:
-Tried disabling malwarebytes from taking over as the antivirus provider, the "Always register Malwarebytes in the Windows Security Center" setting is OFF.

-There is no Windows Defender icon on the control panel.

-Restarting the computer.

-Saw on a forum to start (or restart) the Windows Defender service, opened services.mcs, and the Windows Defender service was absent from the listing (See image 2).

-Again saw on a forum to restart the Security Center service, the restart option was grayed out, so i went into properties and the services was "locked down" with an account and password (see image 3), non of the other services were like this, I'm the only user on this computer. (I don't know if this has something to do with the problem.)

I know windows defender its not a very good anti-malware software but i really want to know if there's a way to enable it before downloading any other antivirus or doing a system restart, thanks so much for your time!!, this is my win 10 build btw: Build 18362.535
Links:

Images: https://imgur.com/a/L2vUcCw
Pastebin (Full malwarebytes scan report): https://pastebin.com/mxmFh6sS

submitted by /u/wGlondis
[link] [comments]

:)

 

Windows Defender was permanently disabled by a malware

Hi Robbie,

You would have to remove the malware first before you can turn on the Windows Defender again. You can use the

Malicious Software Removal Tool to eliminate the malware that entered your PC. Once you have removed it, you can turn Windows Defender on. You can refer to the below steps to turn on the Windows Defender:

• Select the Start button.
• Click Settings, then select Update & Security.
• Click Turn on Windows Defender.

To know more on how to protect your PC with Windows Defender, refer to this
link.

Let us know how it goes.

 

Get message Defender is removing Malware.

Sounds like the malware detections may be in a browser.

Can you give us the complete name/file path of the malware (as it appears under quarantine or on the list of detected items)?

Have you emptied temporary internet files and rebooted the computer? Then do a manual update of WD followed by a Quick Scan.

Any new browser extensions that need to be disabled?

Try this free scanner:
http://blog.emsisoft.com/2015/06/09/how-to-find-and-clean-malware-infections-with-emsisoft-emergency-kit/

If the detections continue see the following free removal guide from Malwaretips.com:
Remove Viruses, Trojans & Malware from Windows (2020 Guide)

To remove malware from Windows, follow these steps:

STEP 1: Scan your computer with Kasperskty TDSSkiller

STEP 2: Scan your computer with Malwarebytes Anti-Malware

STEP 3: Stop the malicious process with Rkill

STEP 4: Double-check for malware with HitmanPro

STEP 5: Scan your computer with AdwCleaner

(OPTIONAL) STEP 6: Scan your computer with Zemana AntiMalware

(OPTIONAL) STEP 7: Reset your browser to default settings

Regards…

Top 10 Ways PUPs Sneak Onto Your Computer. And How To Avoid Them. | Emsisoft | Security Blog

 

Malware removal


Understood, OldMike. I will keep your suggestion in mind. I always appreciate suggestions from those who know more than I do. I think the Malware did do more than one scan, because I had to approve removal of what it found twice. I don't see Windows Defender on the list of programs. I think it was on there before they redid the software. Pluto TV also disappeared.