[SOLVED] Windows defender deleted itself, I can't scan pc for malware and viruses

Piuma · Sep 13, 2024

Hello,
Just found out that my pc doesn't have Windows defender anymore, plus I've tried to download F- secure for an urgent virus scan and the machine refuses to download it, or to open the file.exe.
I'm sure that it's all a massive trouble here. Something it's going on.
I would appreciate help from some expert, please.
Piuma

xrobwx71 · Sep 13, 2024

@DR M

xrobwx71 · Sep 14, 2024

Let's start by opening an elevated command prompt.

Hit Start, type cmd, CTRL + SHIFT + ENTER

An elevated prompt should open. In this prompt copy and paste the following and hit Enter.

DISM /Online /Cleanup-Image /RestoreHealth

Let this finish, please relay any messages you might receive, error or success.

Once the above is finished, in the same prompt copy/paste the following and hit Enter. sfc /scannow
Let this finish, please relay any messages you might receive, error or success.

Piuma · Sep 19, 2024

Hello, I've managed to solve the above mentioned issue by booting my UEFI from a USB.
The problem now is that My INTEL HD GRaphics drive stops working giving me the black screen of death, and then it recovers itself.
I checked through services.msc and it says that everything is FINE, but obviously I keep having this issue continously.
Other than that I cannot access anymore to uefi at boot, by pressing F2, as the laptop Asus keeps loading Windows 8.1.

Piuma · Sep 19, 2024

Here in attachment the logs
Thankyou

PeterJ · Sep 27, 2024

Hello,

Follow the instructions below please.

Step 1:
WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.

Download

SFCFix and move the executable to your desktop.
Download the attachment SFCFix.zip and save it on your desktop.
Save any work you have open, and close all programs.
Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
SFCFix will launch, let it complete.
Once done, a file will appear on your desktop, called SFCFix.txt.
Attach that file to your next reply.

Step 2:
Provide the Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again. Note: If you find that you need to reboot and are unable to because this is a server then try Option#2 below.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to Gofile or WeTransfer and just provide the link here.

Option#2 (only if you are unable to follow the previous instructions)

Please download the Freeware RegBak from here: Acelogix Software - Download products
You will find it at the bottom of the page that the link brings you to.
Go ahead and install this program and accept all the defaults. After the last install screen the program should open.
Click the New Backup button. Accept the defaults and simply click Start.
When it says Finished successfully, click the Close button.
This will bring you back to the main screen of the program. You will see one entry in this list with the date that you did it. Right-click on this line-item and select Explore Backup...
This will bring you into the folder where the backup was made. You should see a Users folder and a Windows folder along with a couple other files. Double-click on the Windows folder to open it. Then open the System32 folder and then config folder. You should see around 6 files in here, one of which is named COMPONENTS.
Copy the COMPONENTS file to your Desktop. If the COMPONENTS file does not exist, please fetch it instead from C:\Windows\System32\config\COMPONENTS.
Now right-click on the COMPONENTS file that is on your desktop and select Send to > Compressed (zipped) folder.
Then please upload the zip file (COMPONENTS.zip) to your favourite file sharing website (it will be too big to upload here). Examples of services to upload to are Gofile or WeTransfer and then just provide the link in your reply.
You can close any open windows you have as well as the RegBak program now.

Piuma · Sep 28, 2024

Hi,
config.zip

I'm now working with the Intel HD Graphics drive disabled, as there's another display driver in the laptop, Nvidia Geforce.
It's impossible to work with nvidia enabled as it keeps crashing continously.

PeterJ · Sep 28, 2024

Tried to download the file config.zip but got a warning that it is infected. Downloaded it anyway. My AV and Virustotal didn't find anything so I opened it. It contains all files in the folder C:\Windows\System32\Config.
I only requested the file components in the folder C:\Windows\System32\Config.
Please provide a new downloadlink for that file only.

Piuma · Sep 28, 2024

I'm sorry for the misunderstanding.
Here's the link requested:components.zip

PeterJ · Sep 28, 2024

Step 1:
WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.

Download the attachment SFCFix.zip and save it on your desktop.
Save any work you have open, and close all programs.
Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
SFCFix will launch, let it complete.
Once done, a file will appear on your desktop, called SFCFix.txt.
Attach that file to your next reply.

Step 2:
Do you have access to another machine running Windows 8.1 64bits with the Italian language installed ?

Piuma · Sep 28, 2024

Unfortunately I don't have any other machine with w8.1

PeterJ · Sep 28, 2024

Restart the machine.
Run the command sfc /scannow in an elevated commandprompt and report the result.
If it fails, copy the file C:\Windows\Logs\CBS\cbs.log to your desktop.
Zip the copied file and attach the zipped cbs.log to your next reply.

Piuma · Sep 28, 2024

Last sfc scan started on 29-sept. Here's in attachment.
Thanks

Piuma · Sep 28, 2024

here's a further cbs log, made after the reboot

PeterJ · Sep 29, 2024

Just a question, is Avast still installed ?

Piuma · Sep 29, 2024

PeterJ · Sep 29, 2024

Step 1:
WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.

Download the attachment SFCFix.zip and save it on your desktop.
Save any work you have open, and close all programs.
Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
SFCFix will launch, let it complete.
Once done, a file will appear on your desktop, called SFCFix.txt.
Open the file, then copy and paste its content in your next reply.

Step 2:
Restart the machine.
Run the command sfc /scannow in an elevated commandprompt and report the result.
If it fails, copy the file C:\Windows\Logs\CBS\cbs.log to your desktop.
Zip the copied file and attach the zipped cbs.log to your next reply.

Piuma · Sep 29, 2024

My logs:

PeterJ · Sep 29, 2024

Step 1:
WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.

Download the attachment SFCFix.zip and save it on your desktop.
Save any work you have open, and close all programs.
Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
SFCFix will launch, let it complete.
Once done, a file will appear on your desktop, called SFCFix.txt.
Open the file, then copy and paste its content in your next reply.

Step 2:
Restart the machine.
Run the command sfc /scannow in an elevated commandprompt and report the result.
If it fails, copy the file C:\Windows\Logs\CBS\cbs.log to your desktop.
Zip the copied file and attach the zipped cbs.log to your next reply.

Piuma · Sep 29, 2024

New issue: can't run/open ms edge (CPU goes to 100%).

[SOLVED] Windows defender deleted itself, I can't scan pc for malware and viruses

Well-known member

Administrator

Administrator

DISM /Online /Cleanup-Image /RestoreHealth​

Well-known member

Well-known member

Attachments

Moderator, Windows Update Expert, Security Analyst

Attachments

Well-known member

Attachments

Moderator, Windows Update Expert, Security Analyst

Well-known member

Moderator, Windows Update Expert, Security Analyst

Attachments

Well-known member

Attachments

Moderator, Windows Update Expert, Security Analyst

Well-known member

Attachments

Well-known member

Attachments

Moderator, Windows Update Expert, Security Analyst

Well-known member

Moderator, Windows Update Expert, Security Analyst

Attachments

Well-known member

Attachments

Moderator, Windows Update Expert, Security Analyst

Attachments

Well-known member

Attachments

DISM /Online /Cleanup-Image /RestoreHealth