Windows 10: Windows 10’s Defender fails with threat service has stopped error

It looks like Microsoft broke Windows Defender on Windows 10 for the second time in this year. Windows Defender update, which was shipped earlier today, is causing ‘Threat service has stopped. Restart now’ error and ‘Unexpected error. Sorry, we ran into a problem. Please try again.’

While many users are blaming Windows 10 KB4549951 for Windows Defender debacle, the real culprit appears to be Security Intelligence 1.313.1638.0, which was pushed earlier today via an automatic Windows Update.

According to various posts in forums and social media platforms, and emails that we received from users, Windows Defender is failing with the following errors:

• Threat service has stopped. Restart now.
• Unexpected error. Sorry, we ran into a problem. Please try again

The bug prevents users from running Windows Defender scans and failed scans could expose Windows 10 customers to security risks and bugs like this could also erode trust in Windows Defender.

“Same here, checking Event Viewer – Applications and Services Logs – Microsoft – Windows – Windows Defender – Operational showed that Windows Defender Service crashes when it scans a folder with a file that has more than one period before extension,” a user reported.

“It happened this morning. Yesterday was fine. I tried everything, nothing worked. It seems to be a Windows glitch that needs to be fixed asap. It starts scanning and breaks in the middle of the scanning process around about 1/3 of the entire process,” another user said.



So what is this issue, exactly? It appears that Microsoft released a botched Windows Security intelligence update version 1.313.1638.0 in the early morning and it triggers unforeseen repercussions, causing Microsoft’s built-in antivirus solution to display ‘Threat service has stopped. Restart now’ error on its homepage.



It is worth noting that uninstalling Windows 10’s Patch Tuesday update would not resolve the problem, but doing a system restore to a point previous to the update does work.

If you’re getting the above error, you should probably wait for Microsoft to acknowledge it and release another intelligence update later today.

The post Windows 10’s Defender fails with threat service has stopped error appeared first on Windows Latest

Weiterlesen...

 

Windows defender: "Threat service has stopped"

Hi,

For us to better assist you, we need to ask a few questions:

• Which version of Windows are you using?
• Were there any changes made before experiencing this issue?

For steps to help resolve the issue, you can refer to
cuda18's post on this
link.

Looking forward to your reply.

Thank you.

 

Windows Defender Advanced Threat Protection Service - Error 1067

Are you running the PC on an enterprise network and logging on to a domain? If not, the Windows Defender Advanced Threat Protection Service won't run and shouldn't be started. It's not intended for stand-alone PCs.

Announcing Windows Defender Advanced Threat Protection for Enterprise

The service that should be running (on Automatic) is Windows Defender Antivirus Service. If you have Cloud-based protection and Automatic sample submission turned on the (Manual) Windows Defender Antivirus Network Inspection Service should also be running.

The previously suggested in-place repair install is quite painless and preserves all your installed apps, settings and files. It should fix things if you can't get them going yourself.

 

Windows defender: "Threat service has stopped"

Some users might be experiencing a glitch with starting the Threat Service (Windows Defender Antimalware Service) that was apparently delivered on Patch Tuesday. The first thing to try would be manually restarting the PC lots of times, with a break
between the restarts (Start button > Power > Restart), as described by Le Boule in this thread:

Windows Defender - Virus & Threat Protection - Restart Now

This issue might also be related to the known glitch where the Security Center Service needs to be restarted in order to get Windows Defender up and running – so try this:

• Manually restart the Security Center, and then attempt to start the Windows Defender Antivirus Service:

1. Press Win Key + R

2. Type “services.msc” and click OK.

3. Right-click on Security Center and click
Restart

3. Right-click on the Windows Defender Antivirus Service and click
Start.

If that doesn't work, then you should follow these general troubleshooting steps:

• Remove any undetected malware by scanning with several third-party malware-removal apps, starting with Malwarebytes Free:

List of Malware Removal Tools

• Run the cleanup tools for any previously installed or preinstalled AV apps:

List of anti-malware product removal tools

• Run the standard Windows 10 system integrity checks:

System file check (SFC) Scan and Repair System Files & DISM to fix things SFC cannot

Source thread:

Defender stopped and cannot restart it

If the above steps fail to start the Windows Defender Antivirus Service, then you can try the steps provided here:

Problems starting Windows Defender in Windows 8/8.1/10

I hadn’t noticed that

PrashantKumar96 actually advised setting DisableAntiSpyware = 0
in this forum article. Before you do that, you should always try just deleting any possible entry for
DisableAntiSpyware = 1, since that setting might have been added by another program or by malware – and that setting will always prevent Windows Defender from starting. For the sake of both ease and safety, this should be done with a REG command.

Type “cmd” in the search box; and then right-click on
Command Prompt and select Run as administrator.

And then copy, paste, and enter this command:

REG DELETE "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware

This is the proper way to enable Windows Defender when it's been turned off via Group Policy.

We can see that there’s a general confusion with respect to this Group Policy setting by the way that Brink equivocates deleting the
DisableAntiSpyware entry with setting its value to 0.

DisableAntiSpyware DWORD

(delete) or 0 = On

1 = Off

Turn On or Off Windows Defender Antivirus in Windows 10

But this setting actually uses a three-state logic, where the absence of the setting specifies the normal
Automatic Disabled compatibility mode for Windows Defender.
Setting DisableAntiSpyware = 0 sets Windows Defender's operational state to “always on” [DisableAntiSpyware = 0 (logical “no/never”)], whereas [DisableAntiSpyware = 1 (logical “yes/always”)] sets Defender’s
operational state to “always off”; and where removing the DisableAntispyware registry entry simply returns Defender to its default operational state – where Defender will be automatically disabled by the installation of any third-party AV app, and
automatically enabled when a third-party AV app is uninstalled.

As the "method of last resort", you can set the Group Policy for Windows Defender to its “always on” mode:

Type “cmd” in the search box; and then right-click on Command Prompt and select
Run as administrator.

And then copy, paste, and enter this command:

REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 0 /f

Then click the Restart button (it might be necessary to restart the PC first).

If this doesn’t work, then you should remove this setting with the REG DELETE command provided above.
Note that this REG ADD command is just the safe and easy way to perform the registry edit that was described in the answer to this thread:

https://answers.microsoft.com/en-us...-stopped/5724ac44-80ff-4a2f-a3a5-46686a92edd9

No internet-connected PC is safe when it's running without real-time protection. So if you’re not able to restart the Windows Defender Antivirus Service, then the best course of action would be to just temporarily install a free third-party AV solution
until we can get a handle on things. Replacing Defender with a third-party AV app should at least provide you with a viable alternative for Defender’s real-time protection, and thus let you safely connect to the internet:

https://www.pcmag.com/article2/0,2817,2388652,00.asp