Windows Defender nowhere to be found and will not start

Page 2 of 4 FirstFirst 1234 LastLast

  1. dexterrules4
    Posts : 21
    Windows 7 Home Premium
    Thread Starter
       New #11

    FSS


    Farbar Service Scanner Version: 27-06-2013
    Ran by alireep (administrator) on 01-07-2013 at 14:06:37
    Running from "C:\Users\alireep\Downloads"
    Microsoft Windows 7 Home Premium Service Pack 1 (X64)
    Boot Mode: Normal
    ****************************************************************

    Internet Services:
    ============

    Connection Status:
    ==============
    Localhost is accessible.
    LAN connected.
    Google IP is accessible.
    Google.com is accessible.
    Yahoo.com is accessible.


    Windows Firewall:
    =============
    mpsdrv Service is not running. Checking service configuration:
    The start type of mpsdrv service is OK.
    The ImagePath of mpsdrv service is OK.

    MpsSvc Service is not running. Checking service configuration:
    Checking Start type: ATTENTION!=====> Unable to retrieve start type of MpsSvc. The value does not exist.
    Checking ImagePath: ATTENTION!=====> Unable to retrieve ImagePath of MpsSvc. The value does not exist.
    Unable to retrieve ServiceDll of MpsSvc. The value does not exist.

    bfe Service is not running. Checking service configuration:
    Checking Start type: ATTENTION!=====> Unable to open bfe registry key. The service key does not exist.
    Checking ImagePath: ATTENTION!=====> Unable to open bfe registry key. The service key does not exist.
    Checking ServiceDll: ATTENTION!=====> Unable to open bfe registry key. The service key does not exist.


    Firewall Disabled Policy:
    ==================


    System Restore:
    ============

    System Restore Disabled Policy:
    ========================


    Action Center:
    ============

    wscsvc Service is not running. Checking service configuration:
    Checking Start type: ATTENTION!=====> Unable to open wscsvc registry key. The service key does not exist.
    Checking ImagePath: ATTENTION!=====> Unable to open wscsvc registry key. The service key does not exist.
    Checking ServiceDll: ATTENTION!=====> Unable to open wscsvc registry key. The service key does not exist.

    Action Center Notification Icon =====> Unable to open HKLM\...\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A} key. The key does not exist.


    Windows Update:
    ============

    Windows Autoupdate Disabled Policy:
    ============================


    Windows Defender:
    ==============
    WinDefend Service is not running. Checking service configuration:
    Checking Start type: ATTENTION!=====> Unable to open WinDefend registry key. The service key does not exist.
    Checking ImagePath: ATTENTION!=====> Unable to open WinDefend registry key. The service key does not exist.
    Checking ServiceDll: ATTENTION!=====> Unable to open WinDefend registry key. The service key does not exist.


    Other Services:
    ==============
    Checking Start type of iphlpsvc: ATTENTION!=====> Unable to open iphlpsvc registry key. The service key does not exist.
    Checking ImagePath of iphlpsvc: ATTENTION!=====> Unable to open iphlpsvc registry key. The service key does not exist.
    Checking ServiceDll of iphlpsvc: ATTENTION!=====> Unable to open iphlpsvc registry key. The service key does not exist.


    File Check:
    ========
    C:\Windows\System32\nsisvc.dll => MD5 is legit
    C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
    C:\Windows\System32\dhcpcore.dll => MD5 is legit
    C:\Windows\System32\drivers\afd.sys => MD5 is legit
    C:\Windows\System32\drivers\tdx.sys => MD5 is legit
    C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
    C:\Windows\System32\dnsrslvr.dll => MD5 is legit
    C:\Windows\System32\mpssvc.dll => MD5 is legit
    C:\Windows\System32\bfe.dll => MD5 is legit
    C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
    C:\Windows\System32\SDRSVC.dll => MD5 is legit
    C:\Windows\System32\vssvc.exe => MD5 is legit
    C:\Windows\System32\wscsvc.dll => MD5 is legit
    C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
    C:\Windows\System32\wuaueng.dll => MD5 is legit
    C:\Windows\System32\qmgr.dll => MD5 is legit
    C:\Windows\System32\es.dll => MD5 is legit
    C:\Windows\System32\cryptsvc.dll => MD5 is legit
    C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
    C:\Windows\System32\ipnathlp.dll => MD5 is legit
    C:\Windows\System32\iphlpsvc.dll => MD5 is legit
    C:\Windows\System32\svchost.exe => MD5 is legit
    C:\Windows\System32\rpcss.dll => MD5 is legit


    **** End of log ****
      My Computer
    Quote Quote

  3. dexterrules4
    Posts : 21
    Windows 7 Home Premium
    Thread Starter
       New #12

    I think with all these registry errors I should do a reinstall of windows 7?? The help and support says I can make my own install CD. What do u think?
      My Computer
    Quote Quote

  4. VistaKing
    Posts : 6,830
    Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
       New #13

    Open Notepad . Inside notepad paste the highlighted text below



    start
    HKLM\...\Run: [PLFSetI] C:\Windows\PLFSetI.exe [200704 2009-12-04] ()
    HKCU\...\Run: [ares] "C:\Program Files (x86)\Ares\Ares.exe" -h [x]
    HKCR\...0c966feabec1\InprocServer32: [Default-shell32] %SystemRoot%\system32\shell32.dll ATTENTION! ====> ZeroAccess?
    HKCR\...409d6c4515e9\InprocServer32: [Default-shell32] %SystemRoot%\system32\shell32.dll ATTENTION! ====> ZeroAccess?
    SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = http://websearch.ask.com/redirect?client=ie&tb=PSI&o=15116&src=crm&q={searchTerms}&locale=&apn_ptnrs=L6&apn_dtid=YYYYYYURUS&a pn_uid=ab42f9a3-d617-4e7f-afbd-56e1f1c46de0&apn_sauid=3DEDEA1C-472F-4D94-87D2-58C38BA4D87F
    SearchScopes: HKCU - {9877B914-4D1A-432B-84F8-927F83FE5520} URL = http://www.mysearchresults.com/search?&c=4003&t=10&q={searchTerms}
    BHO-x32: ArcadeWeb - {3A509151-2B00-4190-9FC0-CC5E721CA8ED} - C:\Program Files (x86)\ArcadeWeb Games\ie.dll ()
    Toolbar: HKLM - avast! EasyPass Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (AVAST Software)
    Toolbar: HKLM-x32 - avast! EasyPass Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (AVAST Software)
    Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
    Toolbar: HKCU - avast! EasyPass Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (AVAST Software)
    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
    Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - No File
    C:\Users\alireep\GoToAssistDownloadHelper.exe
    end



    Save the file as fixlist.txt and save it to the Desktop . Drag the FRST64.exe from the Downloads folder to the Desktop .

    Open up the FRST64.exe and click on the [FIX] button . Once its done it will create a file called Fixlog.txt . Upload the Fixlog.txt on your next reply .

    Restart the PC

    FSS.exe fixes

    MpsSvc.reg

    BFE.reg

    wscsvc.reg

    WinDefend.reg

    iphlpsvc.reg

    Save all of the .reg files to your Desktop . Right click on each file and click on Merge and click on OK to confirm . After you have merged all of the .reg files restart and rerun the FSS.exe bit delete the old FSS.txt file first before you rerun FSS.exe
    Last edited by VistaKing; 01 Jul 2013 at 16:39.
      My Computer
    Quote Quote

  6. dexterrules4
    Posts : 21
    Windows 7 Home Premium
    Thread Starter
       New #14

    Here is Fix Log:
    Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-07-2013 02
    Ran by alireep at 2013-07-01 17:28:57 Run:1
    Running from C:\Users\alireep\Downloads
    Boot Mode: Normal
    ==============================================

    HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\PLFSetI => Value deleted successfully.
    HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ares => Value deleted successfully.
    HKCU\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} => Key not found.
    HKCU\Software\Classes\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9} => Key not found.
    HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} => Key deleted successfully.
    HKCR\CLSID\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} => Key not found.
    HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9877B914-4D1A-432B-84F8-927F83FE5520} => Key deleted successfully.
    HKCR\CLSID\{9877B914-4D1A-432B-84F8-927F83FE5520} => Key not found.
    HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3A509151-2B00-4190-9FC0-CC5E721CA8ED} => Key deleted successfully.
    HKCR\Wow6432Node\CLSID\{3A509151-2B00-4190-9FC0-CC5E721CA8ED} => Key deleted successfully.
    HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{724d43a0-0d85-11d4-9908-00400523e39a} => Value deleted successfully.
    HKCR\CLSID\{724d43a0-0d85-11d4-9908-00400523e39a} => Key deleted successfully.
    HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{724d43a0-0d85-11d4-9908-00400523e39a} => Value deleted successfully.
    HKCR\Wow6432Node\CLSID\{724d43a0-0d85-11d4-9908-00400523e39a} => Key deleted successfully.
    HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} => Value deleted successfully.
    HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key not found.
    HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{724D43A0-0D85-11D4-9908-00400523E39A} => Value deleted successfully.
    HKCR\CLSID\{724D43A0-0D85-11D4-9908-00400523E39A} => Key not found.
    HKCR\PROTOCOLS\Handler\skype-ie-addon-data => Key deleted successfully.
    HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8} => Key not found.
    HKCR\Wow6432Node\PROTOCOLS\Handler\gopher => Key deleted successfully.
    HKCR\Wow6432Node\CLSID\{79eac9e4-baf9-11ce-8c82-00aa004ba90b} => Key not found.
    C:\Users\alireep\GoToAssistDownloadHelper.exe => Moved successfully.

    ==== End of Fixlog ====
      My Computer
    Quote Quote

  7. VistaKing
    Posts : 6,830
    Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
       New #15

    Open Notepad . Inside notepad paste the highlighted text below


    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}]
    "AutoStart"=""

    Save the file as ActionCenterIcon.reg and save it to your Desktop .
    Right click the ActionCenterIcon.reg file and Select Merge and then reboot your machine



    Open up an Elevated Command Prompt. Click on in type CMD . Right click on CMD under Programs (1) choose . On the User Access Control window click on the Yes button . Command Prompt opens up to C:\Windows\System32>_

    Type the command below and press <ENTER>

    regsvr32 ActionCenter.dll
      My Computer
    Quote Quote

  8. dexterrules4
    Posts : 21
    Windows 7 Home Premium
    Thread Starter
       New #16

    VistaKing said:
    Open Notepad . Inside notepad paste the highlighted text below




    FSS.exe fixes

    MpsSvc.reg

    BFE.reg

    wscsvc.reg

    WinDefend.reg

    iphlpsvc.reg

    Save all of the .reg files to your Desktop . Right click on each file and click on Merge and click on OK to confirm . After you have merged all of the .reg files restart and rerun the FSS.exe bit delete the old FSS.txt file first before you rerun FSS.exe

    Says it could not merge all data for windefend.reg because some keys are open or being used?? All others I was able to merge.
      My Computer
    Quote Quote

  10. VistaKing
    Posts : 6,830
    Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
       New #17

    Restart the PC and then retry merging WinDefend.reg again and restart .
      My Computer
    Quote Quote

  11. dexterrules4
    Posts : 21
    Windows 7 Home Premium
    Thread Starter
       New #18

    New FSS report


    Farbar Service Scanner Version: 27-06-2013
    Ran by alireep (administrator) on 01-07-2013 at 17:43:13
    Running from "C:\Users\alireep\Downloads"
    Microsoft Windows 7 Home Premium Service Pack 1 (X64)
    Boot Mode: Normal
    ****************************************************************

    Internet Services:
    ============

    Connection Status:
    ==============
    Localhost is accessible.
    LAN connected.
    Google IP is accessible.
    Google.com is accessible.
    Yahoo.com is accessible.


    Windows Firewall:
    =============
    mpsdrv Service is not running. Checking service configuration:
    The start type of mpsdrv service is OK.
    The ImagePath of mpsdrv service is OK.

    MpsSvc Service is not running. Checking service configuration:
    The start type of MpsSvc service is OK.
    The ImagePath of MpsSvc service is OK.
    The ServiceDll of MpsSvc service is OK.

    bfe Service is not running. Checking service configuration:
    The start type of bfe service is OK.
    The ImagePath of bfe service is OK.
    The ServiceDll of bfe service is OK.


    Firewall Disabled Policy:
    ==================


    System Restore:
    ============

    System Restore Disabled Policy:
    ========================


    Action Center:
    ============

    wscsvc Service is not running. Checking service configuration:
    The start type of wscsvc service is OK.
    The ImagePath of wscsvc service is OK.
    The ServiceDll of wscsvc service is OK.

    Action Center Notification Icon =====> Unable to open HKLM\...\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A} key. The key does not exist.


    Windows Update:
    ============

    Windows Autoupdate Disabled Policy:
    ============================


    Windows Defender:
    ==============
    WinDefend Service is not running. Checking service configuration:
    Checking Start type: ATTENTION!=====> Unable to retrieve start type of WinDefend. The value does not exist.
    Checking ImagePath: ATTENTION!=====> Unable to retrieve ImagePath of WinDefend. The value does not exist.
    Unable to retrieve ServiceDll of WinDefend. The value does not exist.


    Other Services:
    ==============


    File Check:
    ========
    C:\Windows\System32\nsisvc.dll => MD5 is legit
    C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
    C:\Windows\System32\dhcpcore.dll => MD5 is legit
    C:\Windows\System32\drivers\afd.sys => MD5 is legit
    C:\Windows\System32\drivers\tdx.sys => MD5 is legit
    C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
    C:\Windows\System32\dnsrslvr.dll => MD5 is legit
    C:\Windows\System32\mpssvc.dll => MD5 is legit
    C:\Windows\System32\bfe.dll => MD5 is legit
    C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
    C:\Windows\System32\SDRSVC.dll => MD5 is legit
    C:\Windows\System32\vssvc.exe => MD5 is legit
    C:\Windows\System32\wscsvc.dll => MD5 is legit
    C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
    C:\Windows\System32\wuaueng.dll => MD5 is legit
    C:\Windows\System32\qmgr.dll => MD5 is legit
    C:\Windows\System32\es.dll => MD5 is legit
    C:\Windows\System32\cryptsvc.dll => MD5 is legit
    C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
    C:\Windows\System32\ipnathlp.dll => MD5 is legit
    C:\Windows\System32\iphlpsvc.dll => MD5 is legit
    C:\Windows\System32\svchost.exe => MD5 is legit
    C:\Windows\System32\rpcss.dll => MD5 is legit


    **** End of log ****
      My Computer
    Quote Quote

  12. dexterrules4
    Posts : 21
    Windows 7 Home Premium
    Thread Starter
       New #19

    VistaKing said:
    Restart the PC and then retry merging WinDefend.reg again and restart .
    Restarted twice and still saying some keys are in use or open.
      My Computer
    Quote Quote

  13. dexterrules4
    Posts : 21
    Windows 7 Home Premium
    Thread Starter
       New #20

    VistaKing said:
    Open Notepad . Inside notepad paste the highlighted text below


    Open up an Elevated Command Prompt. Click on in type CMD . Right click on CMD under Programs (1) choose . On the User Access Control window click on the Yes button . Command Prompt opens up to C:\Windows\System32>_

    Type the command below and press <ENTER>

    regsvr32 ActionCenter.dll

    Got the following message when I did CMD The module Action Center.dll was loaded but the entry point diiregisterserver was not found. Make sure actioncenter.dll is a valid dll or ocx file and try again.
      My Computer
    Quote Quote

 
Page 2 of 4 FirstFirst 1234 LastLast

  Related Discussions
I've tried everything listed in the various help pages, still unsuccessful. No other antivirus programs installed. Ran SFC scan, no errors found. Finally got to the app screen (after services.msc > Automatic > Restart), clicked on Update Definitions, started to update then aborted with error...
Everytime I startup my computer, windows defender pops up saying that it is turned off. How do I stop it from notifying me? I tried going into services and disabling it, but it still pops up at startup.
Windows Defender won't start
in System Security

Hello guys i have another problem ugh ^_^ when i open windows defender and click start now it wont start the program i get the error saying : The specified service does not exist as an installed service. (Error Code: 0x80070424) Also when i noticed something that in my services list my windows...
Windows Defender wont start!
in System Security

I recently got a pop up notification saying windows defender needs to scan my computer. Ok, fine. But when I click the scan now button, windows defender gives me a error. I checked the windows defender service and it wont turn on at all. I have avast, malware bytes and spybot. All of...
Hi all, I'm having a problem with windows defender. I noticed it was not working, although it has been in the past, so I tried to enable it but get this message: "This program is blocked by group policy. For more information contact your system administrator. (Error code: 0x800704ec)" Any help...
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 01:53.
Find Us