Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Windows Defender nowhere to be found and will not start

01 Jul 2013   #11
dexterrules4

Windows 7 Home Premium
 
 
FSS

Farbar Service Scanner Version: 27-06-2013
Ran by alireep (administrator) on 01-07-2013 at 14:06:37
Running from "C:\Users\alireep\Downloads"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============
mpsdrv Service is not running. Checking service configuration:
The start type of mpsdrv service is OK.
The ImagePath of mpsdrv service is OK.

MpsSvc Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to retrieve start type of MpsSvc. The value does not exist.
Checking ImagePath: ATTENTION!=====> Unable to retrieve ImagePath of MpsSvc. The value does not exist.
Unable to retrieve ServiceDll of MpsSvc. The value does not exist.

bfe Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open bfe registry key. The service key does not exist.
Checking ImagePath: ATTENTION!=====> Unable to open bfe registry key. The service key does not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open bfe registry key. The service key does not exist.


Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

wscsvc Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open wscsvc registry key. The service key does not exist.
Checking ImagePath: ATTENTION!=====> Unable to open wscsvc registry key. The service key does not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open wscsvc registry key. The service key does not exist.

Action Center Notification Icon =====> Unable to open HKLM\...\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A} key. The key does not exist.


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open WinDefend registry key. The service key does not exist.
Checking ImagePath: ATTENTION!=====> Unable to open WinDefend registry key. The service key does not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open WinDefend registry key. The service key does not exist.


Other Services:
==============
Checking Start type of iphlpsvc: ATTENTION!=====> Unable to open iphlpsvc registry key. The service key does not exist.
Checking ImagePath of iphlpsvc: ATTENTION!=====> Unable to open iphlpsvc registry key. The service key does not exist.
Checking ServiceDll of iphlpsvc: ATTENTION!=====> Unable to open iphlpsvc registry key. The service key does not exist.


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****


My System SpecsSystem Spec
.
01 Jul 2013   #12
dexterrules4

Windows 7 Home Premium
 
 

I think with all these registry errors I should do a reinstall of windows 7?? The help and support says I can make my own install CD. What do u think?
My System SpecsSystem Spec
01 Jul 2013   #13
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Open Notepad . Inside notepad paste the highlighted text below



start
HKLM\...\Run: [PLFSetI] C:\Windows\PLFSetI.exe [200704 2009-12-04] ()
HKCU\...\Run: [ares] "C:\Program Files (x86)\Ares\Ares.exe" -h [x]
HKCR\...0c966feabec1\InprocServer32: [Default-shell32] %SystemRoot%\system32\shell32.dll ATTENTION! ====> ZeroAccess?
HKCR\...409d6c4515e9\InprocServer32: [Default-shell32] %SystemRoot%\system32\shell32.dll ATTENTION! ====> ZeroAccess?
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = http://websearch.ask.com/redirect?client=ie&tb=PSI&o=15116&src=crm&q={searchTerms}&locale=&apn_ptnrs=L6&apn_dtid=YYYYYYURUS&a pn_uid=ab42f9a3-d617-4e7f-afbd-56e1f1c46de0&apn_sauid=3DEDEA1C-472F-4D94-87D2-58C38BA4D87F
SearchScopes: HKCU - {9877B914-4D1A-432B-84F8-927F83FE5520} URL = http://www.mysearchresults.com/search?&c=4003&t=10&q={searchTerms}
BHO-x32: ArcadeWeb - {3A509151-2B00-4190-9FC0-CC5E721CA8ED} - C:\Program Files (x86)\ArcadeWeb Games\ie.dll ()
Toolbar: HKLM - avast! EasyPass Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! EasyPass Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (AVAST Software)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - avast! EasyPass Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (AVAST Software)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - No File
C:\Users\alireep\GoToAssistDownloadHelper.exe
end



Save the file as fixlist.txt and save it to the Desktop . Drag the FRST64.exe from the Downloads folder to the Desktop .

Open up the FRST64.exe and click on the [FIX] button . Once its done it will create a file called Fixlog.txt . Upload the Fixlog.txt on your next reply .

Restart the PC

FSS.exe fixes

MpsSvc.reg

BFE.reg

wscsvc.reg

WinDefend.reg

iphlpsvc.reg

Save all of the .reg files to your Desktop . Right click on each file and click on Merge and click on OK to confirm . After you have merged all of the .reg files restart and rerun the FSS.exe bit delete the old FSS.txt file first before you rerun FSS.exe
My System SpecsSystem Spec
.

01 Jul 2013   #14
dexterrules4

Windows 7 Home Premium
 
 

Here is Fix Log:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-07-2013 02
Ran by alireep at 2013-07-01 17:28:57 Run:1
Running from C:\Users\alireep\Downloads
Boot Mode: Normal
==============================================

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\PLFSetI => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ares => Value deleted successfully.
HKCU\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} => Key not found.
HKCU\Software\Classes\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} => Key deleted successfully.
HKCR\CLSID\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9877B914-4D1A-432B-84F8-927F83FE5520} => Key deleted successfully.
HKCR\CLSID\{9877B914-4D1A-432B-84F8-927F83FE5520} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3A509151-2B00-4190-9FC0-CC5E721CA8ED} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{3A509151-2B00-4190-9FC0-CC5E721CA8ED} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{724d43a0-0d85-11d4-9908-00400523e39a} => Value deleted successfully.
HKCR\CLSID\{724d43a0-0d85-11d4-9908-00400523e39a} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{724d43a0-0d85-11d4-9908-00400523e39a} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{724d43a0-0d85-11d4-9908-00400523e39a} => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} => Value deleted successfully.
HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{724D43A0-0D85-11D4-9908-00400523E39A} => Value deleted successfully.
HKCR\CLSID\{724D43A0-0D85-11D4-9908-00400523E39A} => Key not found.
HKCR\PROTOCOLS\Handler\skype-ie-addon-data => Key deleted successfully.
HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8} => Key not found.
HKCR\Wow6432Node\PROTOCOLS\Handler\gopher => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{79eac9e4-baf9-11ce-8c82-00aa004ba90b} => Key not found.
C:\Users\alireep\GoToAssistDownloadHelper.exe => Moved successfully.

==== End of Fixlog ====
My System SpecsSystem Spec
01 Jul 2013   #15
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Open Notepad . Inside notepad paste the highlighted text below


Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}]
"AutoStart"=""


Save the file as ActionCenterIcon.reg and save it to your Desktop .
Right click the ActionCenterIcon.reg file and Select Merge and then reboot your machine



Open up an Elevated Command Prompt. Click on in type CMD . Right click on CMD under Programs (1) choose . On the User Access Control window click on the Yes button . Command Prompt opens up to C:\Windows\System32>_

Type the command below and press <ENTER>

regsvr32 ActionCenter.dll
My System SpecsSystem Spec
01 Jul 2013   #16
dexterrules4

Windows 7 Home Premium
 
 

Quote   Quote: Originally Posted by VistaKing View Post
Open Notepad . Inside notepad paste the highlighted text below




FSS.exe fixes

MpsSvc.reg

BFE.reg

wscsvc.reg

WinDefend.reg

iphlpsvc.reg

Save all of the .reg files to your Desktop . Right click on each file and click on Merge and click on OK to confirm . After you have merged all of the .reg files restart and rerun the FSS.exe bit delete the old FSS.txt file first before you rerun FSS.exe

Says it could not merge all data for windefend.reg because some keys are open or being used?? All others I was able to merge.
My System SpecsSystem Spec
01 Jul 2013   #17
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Restart the PC and then retry merging WinDefend.reg again and restart .
My System SpecsSystem Spec
01 Jul 2013   #18
dexterrules4

Windows 7 Home Premium
 
 
New FSS report

Farbar Service Scanner Version: 27-06-2013
Ran by alireep (administrator) on 01-07-2013 at 17:43:13
Running from "C:\Users\alireep\Downloads"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============
mpsdrv Service is not running. Checking service configuration:
The start type of mpsdrv service is OK.
The ImagePath of mpsdrv service is OK.

MpsSvc Service is not running. Checking service configuration:
The start type of MpsSvc service is OK.
The ImagePath of MpsSvc service is OK.
The ServiceDll of MpsSvc service is OK.

bfe Service is not running. Checking service configuration:
The start type of bfe service is OK.
The ImagePath of bfe service is OK.
The ServiceDll of bfe service is OK.


Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

wscsvc Service is not running. Checking service configuration:
The start type of wscsvc service is OK.
The ImagePath of wscsvc service is OK.
The ServiceDll of wscsvc service is OK.

Action Center Notification Icon =====> Unable to open HKLM\...\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A} key. The key does not exist.


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to retrieve start type of WinDefend. The value does not exist.
Checking ImagePath: ATTENTION!=====> Unable to retrieve ImagePath of WinDefend. The value does not exist.
Unable to retrieve ServiceDll of WinDefend. The value does not exist.


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****
My System SpecsSystem Spec
01 Jul 2013   #19
dexterrules4

Windows 7 Home Premium
 
 

Quote   Quote: Originally Posted by VistaKing View Post
Restart the PC and then retry merging WinDefend.reg again and restart .
Restarted twice and still saying some keys are in use or open.
My System SpecsSystem Spec
01 Jul 2013   #20
dexterrules4

Windows 7 Home Premium
 
 

Quote   Quote: Originally Posted by VistaKing View Post
Open Notepad . Inside notepad paste the highlighted text below


Open up an Elevated Command Prompt. Click on in type CMD . Right click on CMD under Programs (1) choose . On the User Access Control window click on the Yes button . Command Prompt opens up to C:\Windows\System32>_

Type the command below and press <ENTER>

regsvr32 ActionCenter.dll

Got the following message when I did CMD The module Action Center.dll was loaded but the entry point diiregisterserver was not found. Make sure actioncenter.dll is a valid dll or ocx file and try again.
My System SpecsSystem Spec
Reply

 Windows Defender nowhere to be found and will not start




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Used windows defender offline now windows won't start
I ran windows defender offline and now my computer won't start up windows, it keeps rebooting. start up repair doesn't fix the problem nor did returning the computer to the last good configuration. I didn't receive a disk installation disk with the desktop and I don't want to loose everything that...
System Security
Windows defender keeps popping up at start
Everytime I startup my computer, windows defender pops up saying that it is turned off. How do I stop it from notifying me? I tried going into services and disabling it, but it still pops up at startup.
System Security
Windows Defender won't start
Hello guys i have another problem ugh ^_^ when i open windows defender and click start now it wont start the program i get the error saying : The specified service does not exist as an installed service. (Error Code: 0x80070424) Also when i noticed something that in my services list my windows...
System Security
Security center and windows defender wont start.
I have just turned on my windows 7 ultimate 64bit computer and see that the security center service is not running when i try to start it, it says "The windows security center cannot be started" ive tried going into services and cant find it. I have also found out that windows defender does...
System Security
Windows Defender wont start!
I recently got a pop up notification saying windows defender needs to scan my computer. Ok, fine. But when I click the scan now button, windows defender gives me a error. I checked the windows defender service and it wont turn on at all. I have avast, malware bytes and spybot. All of...
System Security
Cannot start windows defender
Hi all, I'm having a problem with windows defender. I noticed it was not working, although it has been in the past, so I tried to enable it but get this message: "This program is blocked by group policy. For more information contact your system administrator. (Error code: 0x800704ec)" Any help...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 21:39.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App