Windows 10: MDA Offline Scan: "Unable to open the offline HKLM..."

Hi,Background info:I formerly had a detection from Malwarebytes AI on my computer - I later got told this was a false positive through their forum. However, I am running some checks just to feel secure.After that detection I factory reset and cleared the drivers a few times and reinstalled windows with USB.I ran a full Malwarebytes scan with root kits after this, and quick and full Microsoft scan - All clean.I have also attempted to run Offline Scans - here is where I have started to scratch my head a little.Offline Scan Problems?It would stop at around 90% - but I managed to get to the msss

:)

 

Defender Periodic Scanning or Offline Scanning?

That link does suggest it's useful to use Defender offline scanning in addition to periodic scanning and a third party real time anti virus (e.g. Kaspersky).

 

KB5023778 Breaks Defender Offline Scan

Hello C. S. Carroll

Thanks for your clarification for this.

The following error messages appear in your MsssWraper.log




The error of Unable to open the offline HKLM SOFTWARE hive with 0x80070020. indicates that the MMS software is unable to access the (HKLM) part of the registry configuration unit, as does the second error message.

I have tried to confirm, in Windows 11 Pro version. And I have also encountered similar results in Windows 11 Pro when performing an offline scan.

However, if I perform a quick scan first and then cancelling it allows the offline scan to run. Could you please try using the quick scan first and then running the offline scan and see if the computer restarts.

 

offline scan by win defender

Hi,

To further assist you with your concern with Windows Defender, follow the steps below:

• Open the Run window by pressing Window + R button.
• Then type services.msc and hit "Enter".
  
• Look for Windows defender service in the list and right click on it and select start.
• Once Windows defender is opened try to do the offline scan on that window.

Let us know how it goes.