Nine times out of ten, when I log off, or when the screen saver kicks in, Windows Defender turns itself off.
Possibly, this is a malfunction built into my Dell Inspiron 5720 laptop, which has other peculiar abnormal operational characteristics.
If, however, this is a problem encountered by other users, I would surely be grateful to learn how to fix it.
* Download the Farbar Service Scanner.
* Once download, right click the fss.exe file, and choose run as administrator.
*Checkmark the following boxes:
-Internet services
-Windows firewall
-System Restore
-Security center/action center
-Windows Update
-Windows defender
*Click Scan. A notepad window will appear with your log file. Save it to the desktop. Then upload the log here in your next reply using the paperclip on the reply box.
andrew129260:
Thank you. Here's what I got:
***************************************************************
Farbar Service Scanner Version: 10-06-2014
Ran by LAPTOP2 (administrator) on 02-07-2014 at 17:03:49
Running from "C:\Users\LAPTOP2\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RK91D6VH"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.
Windows Firewall:
=============
Firewall Disabled Policy:
==================
System Restore:
============
System Restore Disabled Policy:
========================
Action Center:
============
wscsvc Service is not running. Checking service configuration:
The start type of wscsvc service is set to Disabled. The default start type is Auto.
The ImagePath of wscsvc service is OK.
The ServiceDll of wscsvc service is OK.
Windows Update:
============
Windows Autoupdate Disabled Policy:
============================
Windows Defender:
==============
Other Services:
==============
File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
1.)Download security check below.
This will show me what security software you use and what the status is of services such as windows firewall:
Downloading SecurityCheck
Open and run: SecurityCheck.exe
Follow the instructions inside the window that appears.
When done, a Notepad report opens automatically, called: checkup.txt
Please post the checkup.txt in your reply using the paperclip:
_____________________________________________________________________________________
Please Run sfc /scan now using option 2 in this tutorial: SFC /SCANNOW Command - System File Checker
Please post back the results.
Please indicate what message was displayed at the end:
Windows found no integrity violations
OR
Corrupt files were found, and windows was unable to fix them.
OR
Corrupt files were found, and windows successfully repaired them
OBTW, when I attempt to go there, I am advised, "Windows Security Center can't be started."
Results from running Security Check (and I believe I uninstalled the McAfee software six or eight months ago):
Results of screen317's Security Check version 0.99.85
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Security Center service is not running! This report may not be accurate!
Windows Firewall Enabled!
McAfee Anti-Virus and Anti-Spyware
Microsoft Security Essentials
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
McAfee SiteAdvisor
Java 7 Update 25
Java version out of Date!
Adobe Flash Player 12.0.0.77 Flash Player out of Date!
Adobe Reader 10.1.10 Adobe Reader out of Date!
Google Chrome 35.0.1916.114
Google Chrome 35.0.1916.153
````````Process Check: objlist.exe by Laurent````````
Microsoft Security Essentials MSMpEng.exe
Microsoft Security Essentials msseces.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 4%
[b][u]``
When I attempt to run sfc /scannow I am advised, "You must be an administrator running a console session in order to use the sfc utility."
I am the onlyh user of this PC, and I am the Administrator.
Yeah, that confuses some folks, what you are doing by running as administrator is elevating from the user level to the system root level.
Elevated Command Prompt
So to run the SFC you need to elevate and "Run as Admin" before it will work because you are checking system files.
SFC /SCANNOW Command - System File Checker
Just right click before launching the cmd and select "Run as Admin" and it will work.
From post # 5.
I see two anti virus programs. That will cause all kinds of problems.Windows Security Center service is not running! This report may not be accurate!
Windows Firewall Enabled!
McAfee Anti-Virus and Anti-Spyware
Microsoft Security Essentials
Antivirus up to date!
McAfee is probably turning off the firewall.
I will go back to lurking.
Good eye Jack, MSE will turn off defender.
Two AV's aren't a good idea either, it looks like it says the firewall is enabled though.
1.) Good job guys. Just as mentioned above please do the following:
-Uninstall mcafee.
-Uninstall Java. Java is a huge security risk and is unnecessary for the average user.
-Uninstall adobe reader and flash. Adobe reader is an unnecessary program and additional security risk as most web browsers can open pdfs without adobe reader. We can install adobe flash later once we clean you from malware.
2.) Clickstart, type services in the search box. Click services. When the service window opens, browse and look for a service called security center. Click the name of the service, and click start on the left hand side. If it starts with no errors, double click the service and change the startup type to automatic (delayed start) as that is the default state the service is set to startup as.
3.) I suspect you to be infected with malware.
Please read this entirely before we begin malware removal:
Before we start with malware assistance, I want to inform you of a few things:
1.) I am not a recognized malware removal expert. I do not have a certification from a malware removal school. Having said that, I have removed a lot of malware with PCs and have years of experience.
But just like no antivirus program is 100% effective, neither am I. My goal is to simply clean up your PC from any malware, and assist you in any way possible to help you secure your PC.
2.) Sevenforums (This forum)and I will NOT be held responsible for anything that might go wrong with your pc.
3.) You agree to follow all directions given, until I advise that your pc is clean and you are free of threats. You will not abandon the thread.
4.)
Do you agree to these terms?
If yes, reply with a Yes. If not, please state so and I will flag an official malware remover, or I will recommend another place for malware removal assistance.
Quote