Windows 10: Windows Defender Service missing.

Hi,

I have a big issue, the Windows Defender Service is completely missing from the services and as such Windows Defender isn't working.

Been searching and haven't been able to find something that solves my issue.

Windows 10 Pro.

Already tried -
DISM - Failed, didn't find source or something like that.
SFC /SCANNOW - Failed (checked log, only opencl.dll couldn't be restored)
Launch MsMpEng.exe manually - Nothing.

I have no idea how to fix this. =/ Please help.

Regards,
Sanya

:)

 

Fake Microsoft "Security Warning".

Rkill 2.8.4 by Lawrence Abrams (Grinler)

BleepingComputer

Copyright 2008-2016 BleepingComputer.com

More Information about Rkill can be found at this link:

RKill - What it does and What it Doesn't - A brief introduction to the program - Anti-Virus, Anti-Malware, and Privacy Software

Program started at: 12/11/2016 09:11:57 AM in x64 mode.

Windows Version: Windows 10 Home

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* Windows Defender Disabled

[HKLM\SOFTWARE\Microsoft\Windows Defender]

"DisableAntiSpyware" = dword:00000001

Checking Windows Service Integrity:

* gagp30kx [Missing Service]

* IEEtwCollectorService [Missing Service]

* IoQos [Missing Service]

* nv_agp [Missing Service]

* TimeBroker [Missing Service]

* uagp35 [Missing Service]

* uliagpkx [Missing Service]

* WcsPlugInService [Missing Service]

* wpcfltr [Missing Service]

* WSService [Missing Service]

* agp440 [Missing ImagePath]

* AJRouter => %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted [Incorrect ImagePath]

* WpnService => %systemroot%\system32\svchost.exe -k netsvcs [Incorrect ImagePath]

* vmicrdv => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]

* vmicvss => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* No issues found.

Program finished at: 12/11/2016 09:13:32 AM

Execution time: 0 hours(s), 1 minute(s), and 35 seconds(s)

**************************************************************************************************************

The only part of the report I do not understand and would like help with is the following:

Checking Windows Service Integrity:

* gagp30kx [Missing Service]

* IEEtwCollectorService [Missing Service]

* IoQos [Missing Service]

* nv_agp [Missing Service]

* TimeBroker [Missing Service]

* uagp35 [Missing Service]

* uliagpkx [Missing Service]

* WcsPlugInService [Missing Service]

* wpcfltr [Missing Service]

* WSService [Missing Service]

 

Windows Defender Antivirus

Need to reinstall...

Windows Defender Antivirus Service

Location

C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MsMpEng.exe

missing from my computer...

\4.12.17007.18022-0\MsMpEng.exe

What now?

 

Hi.
The opencl.dll error is nothing - don't worry about it.

For the DISM repair, suggest you download the W10 ISO from shown in the tut:

 

Thanks, I'll try that and report back.

Edit: In case it doesn't fix the issue, the Windows Defender Service seem to be MsMpEng.exe (not .dll) and as such I can't just use regsvr32 to register it since it requires a dll (right?) So how would I go about fixing it? =S

 

Probably a repair install using an in-place upgrade, but let's see if DISM doesn't resolve it first.

Do you have any other AV on the system? Do you know when the last time was that an AV scan was run? Have you ever run any anti-telemetry software on the system?

 

DISM didn't seem to fix it, running sfc /scannow again and then restart is in order to try again.

I have used an anti-telemetry program, I'll run it again to see what I have blocked with it.

 

Okay: The anti-telemetry program changes must be undone, and the repair install will need to be performed. *Sad

 

• Do you have any other AV on the system?
• Do you know when the last time was that an AV scan was run?

Just to warn you: many, many of the systems I have run across with anti-telemetry modifications have required a clean install to get them working properly again....so be sure your data is backed up.

 

I've undone the changes and started the repair process, will report back afterwards.

 

Sounds good.

 

That fixed my issue, thank you! Now to go through all the settings that changed and fix them. =)

 

Brilliant! Glad you got it sorted. Cheers! *Smile