Windows Defender wont start!

[ilsmku]

I recently got a pop up notification saying windows defender needs to scan my computer. Ok, fine.

But when I click the scan now button, windows defender gives me a error.

I checked the windows defender service and it wont turn on at all.

I have avast, malware bytes and spybot. All of which report no problems.

And I do NOT have the MS essentials program.


Any clue why I cant get windows defender started?


Thanks!

PS: prior to this, I WAS infected by malware doctor virus. But I was able to remove it. Looks like it might have caused some issues for me.

 

[Alphamale]

I am useing Windows 7 U and it won't start either. It says its turned off. So i go to turn it on and this happens.

 

[Keiichi25]

Check this post:

Error 0x800705b4 with defender - Vista Forums

It suggests that you might have an activation flaw. There is an MS link in there you might want to try and see if that helps.

 

[ilsmku]

Thats one of the errors I get too. My WD service wont start. It just gives me an error. It also messed up my event viewer, but I fixed that somehow.

Also, if I try and start WD, it opens the system 32 folder????


ANyone have any clues? There is NOTHING about this on the web FOR windows 7. I found tons of things to try for VISTA, which I tried, but they did NOT work.


Anyone? before I SFC.exe?

 

[Keiichi25]

The Vista Forum posting should work as Windows 7 uses the same code as Vista with regards to this program.

 

[ilsmku]

The Vista Forum posting should work as Windows 7 uses the same code as Vista with regards to this program.

Sadly, none of those solutions work for me. Mine is not trying to update either. It just wants to scan my computer and if I click scan, I get the error message above.

Ive also tried some other solutions mentioned on other forums and none of those worked either. Or following the instructions didnt yield the same results as described.

But thank you for trying!!!

 

[Alphamale]

I read where you can run CCleaner and it cleaned the registry and it did work for this person. I did try it but it didn't work. The other suggestions did not work.

 

[Keiichi25]

Well, Alpha... Since you have win 7 Ultimate, presumably the Retail version or upgrade, I would see if you can call MS to find out why it is giving you this error. It suggests that there is an activation flaw, or it could be you are unable to contact back to a server. In either case, it is beginning to sound like it is time to have MS involved to look into it a little.

 

[Alphamale]

I have 2 hard drives on here. One for W7 and one for vista. The defender in vista is working with out any problems and i just updated it. I don't care about it one way or another.

 

[Outlander]

Just went through a no start spell with Defender too. Could not figure it out so I went to the Event Viewer to see if there was any wisdom contained therein....It was pouting too! There was an error code for the viewer, 4210 or some such....Google Google...finally found a guy/girl/person that said it all had to do with permissions and all afflicted parties should go to some folder that I can't remember and take ownership. Did so and it cured Defender, Viewer and miracle of miracles media payer reinstalled from features after 3 months of thumbing its nose at me. Go figure?

 

[Hopalong X]

If you have Microsoft Security Essentials installed Defender is turned off automatically.
You don't need both so Defender is turned off.

The security essentials is much better and is a major upgrade in my opinion.
Mike

Install the MSE and you don't have to worry with the Defender.

 

[Alphamale]

Yea i have MSE installed and figure that much.

 

[Hopalong X]

I had the same question when I put the MSE on and Defender was deactivated.

MSE has picked up a few things on web pages that the AV missed or maybe it just found it first.
So it does work at least.

 

[whs]

It is not only MSE that turns the Defender off - any respectable AV program will do that.

 

[ilsmku]

ANy other suggestions? Ive tried manually updating WD and it took the update, but WD (windows defender) still will not run? Everything else listed on the vista help link that was posted earlier on, didnt help either.

Every time I click the WD icon in control panel, it opens up the system32 folder?

 

[ilsmku]

I just ran SFC.exe and it didnt go well... oh noez!

Here is some of what the CBS log said...

Cannot repair member file [l:20{10}]"wersvc.dll"
Cannot repair member file [l:24{12}]"MpClient.dll"

It also has some references to a virus I had prior to this, malware doctor!!! That was a PITA to get ride of. But it looks like it hosed windows?

Looks like it might be reinstall time? Right?

Usually I will just format and do a clean install. But darnit! I just did a clean install like 2 months ago and it takes forever to load all my games, patches and programs.

I normally would never do this, but does windows 7 offer the ability to do a in place reinstall? So I can keep my programs and games? That way I dont have to reinstall EVERYTHING?

Thanks all!

 

[ilsmku]

Here is some of the actual CBS log.

2010-09-15 19:28:49, Info CSI 00000196 [SR] Verify complete
2010-09-15 19:28:49, Info CSI 00000197 [SR] Verifying 100 (0x00000064) components
2010-09-15 19:28:49, Info CSI 00000198 [SR] Beginning Verify and Repair transaction
2010-09-15 19:28:52, Info CSI 00000199 Hashes for file member \SystemRoot\WinSxS\x86_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.16385_none_579306edb982ae36\MpClient.dll do not match actual file [l:24{12}]"MpClient.dll" :
Found: {l:32 b:K+akpI8JJ8eMT1hvXmol2Tp5SUV8CFEJJSWnCudBLq8=} Expected: {l:32 b:9ECLqjzlm30YS0ajfWYNRNT366dGt2uRWbTDWMmAwHw=}
2010-09-15 19:28:52, Info CSI 0000019a [SR] Cannot repair member file [l:24{12}]"MpClient.dll" of Security-Malware-Windows-Defender, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2010-09-15 19:28:53, Info CSI 0000019b Hashes for file member \SystemRoot\WinSxS\x86_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.16385_none_579306edb982ae36\MpClient.dll do not match actual file [l:24{12}]"MpClient.dll" :
Found: {l:32 b:K+akpI8JJ8eMT1hvXmol2Tp5SUV8CFEJJSWnCudBLq8=} Expected: {l:32 b:9ECLqjzlm30YS0ajfWYNRNT366dGt2uRWbTDWMmAwHw=}
2010-09-15 19:28:53, Info CSI 0000019c [SR] Cannot repair member file [l:24{12}]"MpClient.dll" of Security-Malware-Windows-Defender, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2010-09-15 19:28:53, Info CSI 0000019d [SR] This component was referenced by [l:238{119}]"Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~x86~~6.1.7600.16385.Microsoft-Windows-Client-Features-Update"
2010-09-15 19:28:53, Info CSI 0000019e Hashes for file member \??\C:\Program Files\Windows Defender\MpClient.dll do not match actual file [l:24{12}]"MpClient.dll" :
Found: {l:32 b:K+akpI8JJ8eMT1hvXmol2Tp5SUV8CFEJJSWnCudBLq8=} Expected: {l:32 b:9ECLqjzlm30YS0ajfWYNRNT366dGt2uRWbTDWMmAwHw=}
2010-09-15 19:28:53, Info CSI 0000019f Hashes for file member \SystemRoot\WinSxS\x86_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.16385_none_579306edb982ae36\MpClient.dll do not match actual file [l:24{12}]"MpClient.dll" :
Found: {l:32 b:K+akpI8JJ8eMT1hvXmol2Tp5SUV8CFEJJSWnCudBLq8=} Expected: {l:32 b:9ECLqjzlm30YS0ajfWYNRNT366dGt2uRWbTDWMmAwHw=}
2010-09-15 19:28:53, Info CSI 000001a0 [SR] Could not reproject corrupted file [ml:520{260},l:74{37}]"\??\C:\Program Files\Windows Defender"\[l:24{12}]"MpClient.dll"; source file in store is also corrupted



POQ 81 ends.
2010-09-15 19:29:09, Info CSI 000001b6 [SR] Verify complete
2010-09-15 19:29:09, Info CSI 000001b7 [SR] Repairing 2 components
2010-09-15 19:29:09, Info CSI 000001b8 [SR] Beginning Verify and Repair transaction
2010-09-15 19:29:09, Info CSI 000001b9 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-feedback-service_31bf3856ad364e35_6.1.7600.16385_none_79a24984f239351a\wersvc.dll do not match actual file [l:20{10}]"wersvc.dll" :
Found: {l:32 b:/1YH9UKXW+OvgPBzicoh95Tl5MFcJA88ZgA0v7twu/g=} Expected: {l:32 b:4elDbrCW/33pp22mIXA1JX75/HVl3bkBbco4Wefx7w8=}
2010-09-15 19:29:09, Info CSI 000001ba [SR] Cannot repair member file [l:20{10}]"wersvc.dll" of Microsoft-Windows-Feedback-Service, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2010-09-15 19:29:09, Info CSI 000001bb Hashes for file member \SystemRoot\WinSxS\x86_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.16385_none_579306edb982ae36\MpClient.dll do not match actual file [l:24{12}]"MpClient.dll" :
Found: {l:32 b:K+akpI8JJ8eMT1hvXmol2Tp5SUV8CFEJJSWnCudBLq8=} Expected: {l:32 b:9ECLqjzlm30YS0ajfWYNRNT366dGt2uRWbTDWMmAwHw=}
2010-09-15 19:29:09, Info CSI 000001bc [SR] Cannot repair member file [l:24{12}]"MpClient.dll" of Security-Malware-Windows-Defender, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2010-09-15 19:29:09, Info CSI 000001bd Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-feedback-service_31bf3856ad364e35_6.1.7600.16385_none_79a24984f239351a\wersvc.dll do not match actual file [l:20{10}]"wersvc.dll" :
Found: {l:32 b:/1YH9UKXW+OvgPBzicoh95Tl5MFcJA88ZgA0v7twu/g=} Expected: {l:32 b:4elDbrCW/33pp22mIXA1JX75/HVl3bkBbco4Wefx7w8=}
2010-09-15 19:29:09, Info CSI 000001be [SR] Cannot repair member file [l:20{10}]"wersvc.dll" of Microsoft-Windows-Feedback-Service, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2010-09-15 19:29:09, Info CSI 000001bf [SR] This component was referenced by [l:198{99}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7600.16385.WindowsFoundationDelivery"
2010-09-15 19:29:09, Info CSI 000001c0 Hashes for file member \??\C:\Windows\System32\wersvc.dll do not match actual file [l:20{10}]"wersvc.dll" :
Found: {l:32 b:/1YH9UKXW+OvgPBzicoh95Tl5MFcJA88ZgA0v7twu/g=} Expected: {l:32 b:4elDbrCW/33pp22mIXA1JX75/HVl3bkBbco4Wefx7w8=}
2010-09-15 19:29:09, Info CSI 000001c1 Hashes for file member \SystemRoot\WinSxS\x86_microsoft-windows-feedback-service_31bf3856ad364e35_6.1.7600.16385_none_79a24984f239351a\wersvc.dll do not match actual file [l:20{10}]"wersvc.dll" :
Found: {l:32 b:/1YH9UKXW+OvgPBzicoh95Tl5MFcJA88ZgA0v7twu/g=} Expected: {l:32 b:4elDbrCW/33pp22mIXA1JX75/HVl3bkBbco4Wefx7w8=}
2010-09-15 19:29:09, Info CSI 000001c2 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"wersvc.dll"; source file in store is also corrupted
2010-09-15 19:29:09, Info CSI 000001c3 Hashes for file member \SystemRoot\WinSxS\x86_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.16385_none_579306edb982ae36\MpClient.dll do not match actual file [l:24{12}]"MpClient.dll" :
Found: {l:32 b:K+akpI8JJ8eMT1hvXmol2Tp5SUV8CFEJJSWnCudBLq8=} Expected: {l:32 b:9ECLqjzlm30YS0ajfWYNRNT366dGt2uRWbTDWMmAwHw=}
2010-09-15 19:29:09, Info CSI 000001c4 [SR] Cannot repair member file [l:24{12}]"MpClient.dll" of Security-Malware-Windows-Defender, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2010-09-15 19:29:09, Info CSI 000001c5 [SR] This component was referenced by [l:238{119}]"Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~x86~~6.1.7600.16385.Microsoft-Windows-Client-Features-Update"
2010-09-15 19:29:09, Info CSI 000001c6 Hashes for file member \??\C:\Program Files\Windows Defender\MpClient.dll do not match actual file [l:24{12}]"MpClient.dll" :
Found: {l:32 b:K+akpI8JJ8eMT1hvXmol2Tp5SUV8CFEJJSWnCudBLq8=} Expected: {l:32 b:9ECLqjzlm30YS0ajfWYNRNT366dGt2uRWbTDWMmAwHw=}
2010-09-15 19:29:09, Info CSI 000001c7 Hashes for file member \SystemRoot\WinSxS\x86_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.16385_none_579306edb982ae36\MpClient.dll do not match actual file [l:24{12}]"MpClient.dll" :
Found: {l:32 b:K+akpI8JJ8eMT1hvXmol2Tp5SUV8CFEJJSWnCudBLq8=} Expected: {l:32 b:9ECLqjzlm30YS0ajfWYNRNT366dGt2uRWbTDWMmAwHw=}
2010-09-15 19:29:09, Info CSI 000001c8 [SR] Could not reproject corrupted file [ml:520{260},l:74{37}]"\??\C:\Program Files\Windows Defender"\[l:24{12}]"MpClient.dll"; source file in store is also corrupted
2010-09-15 19:29:09, Info CSI 000001c9 Repair results created: