Windows 10: Virus got through Windows Defender, crippled Windows Security Virus & threat protection.

Discus and support Virus got through Windows Defender, crippled Windows Security Virus & threat protection. in AntiVirus, Firewalls and System Security to solve the problem; Hi. Today I noticed that I hadn't got a Windows Update in a while. Sure enough, I discovered that the service was broken and could not be started... Discussion in 'AntiVirus, Firewalls and System Security' started by Johanp_, Nov 14, 2019.

  1. Johanp_ Win User

    Virus got through Windows Defender, crippled Windows Security Virus & threat protection.


    Hi.

    Today I noticed that I hadn't got a Windows Update in a while. Sure enough, I discovered that the service was broken and could not be started manually. The reason for this, after a bit of digging, was that a good chunk of the registry entries for the Windows Update service were missing. I had a friend export their Windows Update related registry keys and I got the system working again. Following this I installed about 5 updates in total, one of which was a big cumulative one, and after that I installed 1909.

    Now I wouldn't put it past this lovely operating system to entirely bork itself as it has done so for me and many others in the past. However a friend suggested that I run a virus scan and I figured it couldn't hurt, confidently exclaiming that I hadn't had a virus for about 10 years or so.

    Turns out the Windows Security Virus & threat protection was also broken. Very broken, in fact. I installed malwarebytes, ran a quick scan and discovered a veritable infestation of computer ligma. With 21 instances of malware detected, it was truly a smorgasbord of virtual diseases. Mostly trojans, some malicious registry edits and a couple "backdoors". I wiped them, ran a full system scan which revealed nothing new and then set about trying to fix my antivirus.


    Now 2 hours later I have not had much success and I am writing this in the hopes that someone will help me.


    Yes, I did disable (even uninstall) malwarebytes before trying to start the following service.

    C:\Windows\system32>net start WdNisSvc

    The Windows Defender Antivirus Network Inspection Service service is starting.

    The Windows Defender Antivirus Network Inspection Service service could not be started.



    I don't know if this is useful information but I will include it here.

    C:\Windows\system32>sc start WdNisSvc

    SERVICE_NAME: WdNisSvc

    TYPE : 10 WIN32_OWN_PROCESS

    STATE : 2 START_PENDING

    (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)

    WIN32_EXIT_CODE : 0 (0x0)

    SERVICE_EXIT_CODE : 0 (0x0)

    CHECKPOINT : 0x0

    WAIT_HINT : 0x7d0

    PID : 7568

    FLAGS :



    This is what I've tried so far.

    • sfc /scannow
    • DISM /Online /Cleanup-image /RestoreHealth
    • Checked Group Policy for any abnormal settings related to Windows Defender/Security

    I have also modified a couple of registry entries relating to Windows Defender:
    • Deleted 3 entries in "Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" which were set to disable certain features relating to real-time protection
    • Deleted 1 entry in "Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" which was set to disable the antivirus feature.
    Notably:
    • The value of "Start" in "Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SecurityHealthService" is set to 3. I would like to know if this is correct as I have seen people suggest both 2 and 3.
    • The value of "Start" in "Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisDrv" is set to 3. I don't know if this is correct or not.
    • The value of "Start" in "Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc" is set to 3. I don't know if this is correct or not.


    If someone could help me with this it would probably make my day, I've been messing with this all day and it's pretty exhausting.

    :)
     
    Johanp_, Nov 14, 2019
    #1

  2. Virus & Threat Protection not show up in Windows Security

    Hello,

    My name is Jennifer, an independent advisor trying to help.

    Here you have the steps to activate it:

    https://support.microsoft.com/en-us/help/401298...

    https://docs.microsoft.com/en-us/windows/securi...

    https://docs.microsoft.com/en-us/windows/securi...

    https://www.howto-connect.com/disable-enable-vi...

    Standard Disclaimer: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research
    any product advertised on the site before you decide to download and install it

    Regards.
     
    JenniferCooper19, Nov 14, 2019
    #2
  3. Cannot turn on Windows Defender virus protection

    I had the same sort of symptoms. In the Windows Security Center, under Virus and threat protection, it said "Your virus & threat protection is managed by your organization."


    Virus got through Windows Defender, crippled Windows Security Virus & threat protection. wm5Jc.png


    I note you mentioned the Registry Keys under HKLM/SOFTWARE/Microsoft/Windows Defender. Nice spotting, but it seems like there is another key that is causing the problem for some users.

    Steps to a solution:

    1. Press the Windows key and type "regedit"
    2. On the regedit icon that appears, right-click and select Run as Administrator.
    3. Navigate to the folder located at HKLM\SOFTWARE\Policies\Microsoft\Windows Defender (You can paste this into the address box at the top of the window, or navigate manually using the side directory structure)
    4. In this folder, there are probably two keys. Right-click and Delete the DisableAntiSpyware key.
    5. Exit regedit, and return to the Windows Defender settings screen (refresh it if necessary). Windows Defender should have the scan options available and working.

    Solution adapted from here, with a much more detailed solution here.
     
    MechtEngineer, Nov 14, 2019
    #3
  4. JCH54 Win User

    Virus got through Windows Defender, crippled Windows Security Virus & threat protection.

    virus and threat protection

    Virus and threat protection has stopped and will not restart, Windows 10 ver 1709, antimalware client ver 4.12.16299.15 . SuperAntiSpyware installed.

    I have tried most of the suggestions from the support pages, all have been ineffective. Any suggestions

    Moved from: Virus and Malware / Windows Defender / Updating Virus and Spyware Definitions / Windows 10
     
    JCH54, Nov 14, 2019
    #4
Thema:

Virus got through Windows Defender, crippled Windows Security Virus & threat protection.

Loading...
  1. Virus got through Windows Defender, crippled Windows Security Virus & threat protection. - Similar Threads - Virus got through

  2. Windows Security Virus and threat protection

    in AntiVirus, Firewalls and System Security
    Windows Security Virus and threat protection: Something's wrong with the windows security scanners. Both the quick and full scan is not fully working properly. They only scan up to 49 files not complete the whole job they were designed to do. Once it reaches 49 the notification says the scan is complete. I need to know...
  3. Windows Security Virus and threat protection

    in AntiVirus, Firewalls and System Security
    Windows Security Virus and threat protection: Something's wrong with the windows security scanners. Both the quick and full scan is not fully working properly. They only scan up to 49 files not complete the whole job they were designed to do. Once it reaches 49 the notification says the scan is complete. I need to know...
  4. Windows Virus & Threat Protection

    in AntiVirus, Firewalls and System Security
    Windows Virus & Threat Protection: Hi, My Virus & threat protection in windows 10 is green mark but when I clicked to manage settings. Real - time protection and Automatic sample submission and exclusion settings are off and grey out. It can not be on and its says in red " This setting is managed by your...
  5. security - virus & threat protection

    in AntiVirus, Firewalls and System Security
    security - virus & threat protection: My computer is showing virus & threat protection is managed by my organization. We are a small office and each computer should only have Windows Defender running. We also had Malwarebytes. I deleted Malwarebytes but now I cannot run Defender. I don't see any other...
  6. Windows Defender Virus and Threat Protection

    in AntiVirus, Firewalls and System Security
    Windows Defender Virus and Threat Protection: Ransom ware protection says "Setup One Drive" I enter my email and it says your one drive is already synced for that address. Yet Defender still says you need to set up Onedrive for ransomware protection. We have been issued with a ransomware threat from and unknown...
  7. Virus & Threat Protection

    in AntiVirus, Firewalls and System Security
    Virus & Threat Protection: My virus & protection will not work. Windows Defender has been off for a bit now. It says "This setting is manage by your administrator." It says this too, "Your IT administrator as limited access to some areas of this app, and the item you tried to access is not...
  8. Windows Defender Security - Virus & Threat Protection Problem

    in AntiVirus, Firewalls and System Security
    Windows Defender Security - Virus & Threat Protection Problem: Hi Microsoft service, I need your help to fix my computer that I had struggle to find why Virus & Threat Protection is not working. I was updated Windows 10 Update. There are some changes to add new feature. Need your help to fix my computer. Regards, Spring...
  9. Windows 10 Windows Defender Security Center/Virus and Threat Protection

    in AntiVirus, Firewalls and System Security
    Windows 10 Windows Defender Security Center/Virus and Threat Protection: Just this week I started receiving notifications that virus and threat protection was turned off. When I checked all the settings under virus and threat protection were turned off and when I attempted to turn them on I received a pop-up message: User Account Control Do...
  10. Windows Security : Virus & threat protection {Will not open.}

    in Windows 10 Customization
    Windows Security : Virus & threat protection {Will not open.}: I click on "Virus & threat protection" and a message appears. It says "Your IT administrator has limited access to some areas of this app, and the item you tried to access is not available. Contact IT helpdesk for more information." Please help. Version 1803 (OS Build...