Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

RE: Windows Defender Re-installation

690 views
Skip to first unread message

Eileen

unread,
Mar 23, 2007, 9:31:38 AM3/23/07
to
I did the same thing and I reinstalled defender by going to the restore
option in accessories then opening up system tools anbd then system restore.
I restored to a date before the uninstall and defender game back and is now
working great. I hope that this works

"Mark" wrote:

> Thanks, Richard. Sounds like a plan.
>
> Thanks to everyone else as well.
>
> "Mark" wrote:
>
> > When upgrading Windows XP to Vista, I inadvertantly uninstalled the Vista
> > version of Defender thinking it was the XP version (using Add/Remove
> > Programs). I then went on to make a whole bunch of changes to the OS and
> > installed and reconfigured a wide range of software applications. THEN I
> > realized I uninstalled an OS component I needed and wanted.
> >
> > There was no (apparent) way to re-install Defender. It was not a component
> > that I could enable nor did a system repair (from the install disk)
> > re-install defender; the system repair utility (apparently) perceived the
> > removal of Defender as a desired change and did not re-install it.
> >
> > Any suggestions?
> >
> > I have one for Microsoft: If you give people the ability to remove
> > software, be sure to give them the ability to add it back later.
> >
> > ----------------
> > This post is a suggestion for Microsoft, and Microsoft responds to the
> > suggestions with the most votes. To vote for this suggestion, click the "I
> > Agree" button in the message pane. If you do not see the button, follow this
> > link to open the suggestion in the Microsoft Web-based Newsreader and then
> > click "I Agree" in the message pane.
> >
> > http://windowshelp.microsoft.com/communities/newsgroups/en-us/default.mspx?mid=45d3b5e7-477e-40f2-87f0-f78aab74bc7a&dg=microsoft.public.windows.vista.installation_setup

cdnninja

unread,
Apr 12, 2007, 1:42:01 PM4/12/07
to
I too have the same issues and observations. I upgraded from xp home to
vista premium but prior to upgrade I forgot to uninstall windows defender
BETA. After the upgrade defender wasn't running properly and I realized I
still had the beta version installed then uninstalled it. Ever since that
moment I've never had any defender again, beta or vista version. I beleive
that somehow both versions shared some files that were mistakenly uninstalled
when I uninstalled windows defender BETA. I've tried going down the
microsoft support path but they seemed to have less of an idea than me and
told me to install a 3rd party anti-spyware, so I did. However I would love
to be able to use defender instead. Ity would also be great to figure out
this problem. Thanks

"Mark" wrote:

> Thanks for all the replies folks. Sorry for the delay.
>
> With regard to how I installed Vista, yes, I did an upgrade from XP to Vista
> Enterprise RTM. When I went to remove what I thought was the old version of
> Defender, I went to the remove program utility in Vista (the same one a
> person would use to remove any non-OS program). Defender WAS listed
> (probably because I did not uninstall the XP version prior to upgrading). So
> I uninstalled it and rebooted.
>
> From that point on I have been getting the 0x8...70002 error message - the
> one that is usually reserved for failed windows updates. HOWEVER, when I
> used the proscribed methodology (from MS) to address that error, it did not
> work. I am getting the error not just from Windows update but also when I
> try to do -anything- with defender (including update it via Windows update).
>
> The only thing I can think of is that when I removed the XP version of
> Defender, the uninstall utility also removed a key .DLL or other resource
> (registry setting??)
>
> When I did a system repair off of the DVD, it did not repair Defender.
>
> Still looking for help....
>
> Thanks!
>
> "GeekUnit" wrote:
>
> > I hate to say it Mark, but I can't even find an inf file to re-install with.
> > What about just re-downloading the beta and installing it that way?
> >
> >
> >
> > http://www.microsoft.com/athome/security/spyware/software/default.mspx
> > --
> > geekunit
> > wtfamidoing.info
> >

cdnninja

unread,
Apr 18, 2007, 1:40:09 PM4/18/07
to
i Mark, sorry I know this is a late response however I might have a fix for
you, please read the following:
The root cause of your problem sounds like the same issue as errors
0x80070006 is similar as 0x80070002. It can be caused by
damaged registry information or Windows Defend files. Try the following,
hope this helps.

Step 1: Back up Registry

==================

1. Click Start, type "regedit" (without quotation marks) in the search bar
and press Enter.

2. In the Registry Editor, click File menu, and click Export.

3. In the Save In list, select the folder where you want to save the backup.

4. In the File Name box, and type a name for your backup file, such as
"Options" or "Backup".

5. Click Save.

Step 2: Create and Run the Registry File

==================

1. Click Start, type "notepad C:\register.reg" (without quotation marks) in
the Search bar, and then click OK. Choose Yes when you are prompted to create
a new file.

2. Copy the following texts between the star marks and then paste them into
the opened Notepad window:

************************BEGIN**************************

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend]

"DisplayName"="@%ProgramFiles%\\Windows Defender\\MsMpRes.dll,-103"

"ErrorControl"=dword:00000001

"Group"="COM Infrastructure"

"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\

74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\

00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\

6b,00,20,00,73,00,65,00,63,00,73,00,76,00,63,00,73,00,00,00

"Start"=dword:00000002

"Type"=dword:00000020

"Description"="@%ProgramFiles%\\Windows Defender\\MsMpRes.dll,-3068"

"DependOnService"=hex(7):52,00,70,00,63,00,53,00,73,00,00,00,00,00

"ObjectName"="LocalSystem"

"ServiceSidType"=dword:00000001

"RequiredPrivileges"=hex(7):53,00,65,00,49,00,6d,00,70,00,65,00,72,00,73,00,6f,\

00,6e,00,61,00,74,00,65,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,\

65,00,00,00,53,00,65,00,42,00,61,00,63,00,6b,00,75,00,70,00,50,00,72,00,69,\

00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,52,00,65,00,73,00,\

74,00,6f,00,72,00,65,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,\

00,00,00,53,00,65,00,44,00,65,00,62,00,75,00,67,00,50,00,72,00,69,00,76,00,\

69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,43,00,68,00,61,00,6e,00,67,\

00,65,00,4e,00,6f,00,74,00,69,00,66,00,79,00,50,00,72,00,69,00,76,00,69,00,\

6c,00,65,00,67,00,65,00,00,00,53,00,65,00,53,00,65,00,63,00,75,00,72,00,69,\

00,74,00,79,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,\

00,00

"FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\

00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend\Parameters]

"ServiceDllUnloadOnStop"=dword:00000001

"ServiceDll"=hex(2):25,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,46,00,69,\

00,6c,00,65,00,73,00,25,00,5c,00,57,00,69,00,6e,00,64,00,6f,00,77,00,73,00,\

20,00,44,00,65,00,66,00,65,00,6e,00,64,00,65,00,72,00,5c,00,6d,00,70,00,73,\

00,76,00,63,00,2e,00,64,00,6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend\Security]

"Security"=hex:01,00,14,80,04,01,00,00,10,01,00,00,14,00,00,00,30,00,00,00,02,\

00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\

00,00,02,00,d4,00,07,00,00,00,00,00,28,00,ff,01,0f,00,01,06,00,00,00,00,00,\

05,50,00,00,00,b5,89,fb,38,19,84,c2,cb,5c,6c,23,6d,57,00,77,6e,c0,02,64,87,\

00,0b,28,00,00,00,00,10,01,06,00,00,00,00,00,05,50,00,00,00,b5,89,fb,38,19,\

84,c2,cb,5c,6c,23,6d,57,00,77,6e,c0,02,64,87,00,00,14,00,fd,01,02,00,01,01,\

00,00,00,00,00,05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,\

05,20,00,00,00,20,02,00,00,00,00,14,00,9d,01,02,00,01,01,00,00,00,00,00,05,\

04,00,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,\

00,28,00,15,00,00,00,01,06,00,00,00,00,00,05,50,00,00,00,49,59,9d,77,91,56,\

e5,55,dc,f4,e2,0e,a7,8b,eb,ca,7b,42,13,56,01,01,00,00,00,00,00,05,12,00,00,\

00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend\Enum]

"0"="Root\\LEGACY_WINDEFEND\\0000"

"Count"=dword:00000001

"NextInstance"=dword:00000001

*************************END***************************

After you paste the above commands, please close the Notepad window. Choose
Yes when you are prompted to save the file. Then save as "the same name you
originally gave to the registry back up.(note it must be the exact same name
as this new file must replace the old one)

3. next double click on the new file.
4. When you receive a message box asking "Are you sure you want to add the
information in the REG file to the registry", choose "Yes"

5. You will receive another message box saying "Information in the REG file
has been successfully entered into the registry", please click "OK" to
confirm.

6. Restart the computer.
Hope this helps your situation, regards.

Ed Stoddard

unread,
Nov 25, 2007, 9:51:00 PM11/25/07
to
Richard,

It will NOT work. I've tried several times. I have the same problem, in
that I had a copy of Windows Defender showing in the Programs list and
uninstalled it. Now I know HOW built-in Windows Defender is in Vista. I
should NEVER have been done this way.

Anyway, I can not re-install Windows Defender. When I attempt such the
installer program tells me Windows Defender is built-in, so it won't install
it!

Currently, I cannot turn Windows Defender on. I get this message when I try
to:

"Windows could not start the Windows Defender service on Local Computer.

Error 0x80092003: An error occurred while reading or writing to a file."

I cannot install, uninstall or turn it on. And Microsoft, in their infinite
wisdom, failed to make Windows Defender a user controlled component!


"Richard Urban" wrote:

> Try to install it on Vista. It probably won't work, but
> you have nothing to loose at this point.
>
> --
>
>
> Regards,
>
> Richard Urban
> Microsoft MVP Windows Shell/User
> (For email, remove the obvious from my address)
>
> Quote from George Ankner:
> If you knew as much as you think you know,
> You would realize that you don't know what you thought you knew!
>
>
>
> "Mark" <Ma...@discussions.microsoft.com> wrote in message
> news:0468AA14-C448-4D4B...@microsoft.com...
> >I did run the upgrade advisor and I believe I dealt with all of the
> >programs
> > it advised me of. If I missed the advise on Defender, well so it goes.
> >
> > That being I still need to fix defender. If anyone has any suggestions
> > that
> > will help me move forward, I would appreciate it.
> >
> > "Richard Urban" wrote:
> >
> >> You run the upgrade advisor from the DVD. It tells what may have a
> >> problem.
> >> Then YOU uninstall the program or drivers *before* you install Vista.
> >>
> >>
> >>
> >> --
> >>
> >>
> >> Regards,
> >>
> >> Richard Urban
> >> Microsoft MVP Windows Shell/User
> >> (For email, remove the obvious from my address)
> >>
> >> Quote from George Ankner:
> >> If you knew as much as you think you know,
> >> You would realize that you don't know what you thought you knew!
> >>
> >>
> >> "Mark" <Ma...@discussions.microsoft.com> wrote in message
> >> news:B0FDE947-53EA-45F0...@microsoft.com...
> >> > True,
> >> >
> >> > But the Vista upgrade from XP did not properly remove the XP Defender
> >> > (I
> >> > checked the date prior to uninstalling), as the old version WAS listed
> >> > as
> >> > an
> >> > external program that could be removed (More below under reply to
> >> > GeekUnit).
> >> >
> >> > "Richard Urban" wrote:
> >> >
> >> >> Right, it is.
> >> >>
> >> >> But Windows Defender can not be removed (at this time). It is a
> >> >> protected
> >> >> system resource. In a pure Vista install it is not listed in Vista
> >> >> add/remove, or anywhere else for removal purposes.
> >> >>
> >> >> You CAN turn it off!
> >> >>
> >> >> --
> >> >>
> >> >>
> >> >> Regards,
> >> >>
> >> >> Richard Urban
> >> >> Microsoft MVP Windows Shell/User
> >> >> (For email, remove the obvious from my address)
> >> >>
> >> >> Quote from George Ankner:
> >> >> If you knew as much as you think you know,
> >> >> You would realize that you don't know what you thought you knew!
> >> >>
> >> >>
> >> >>
> >> >> "Jeff" <S.Cere...@duh.edu> wrote in message
> >> >> news:eXOvEg8H...@TK2MSFTNGP04.phx.gbl...
> >> >> > umm,
> >> >> >
> >> >> > Theo,
> >> >> > Whats the uninstall a program window in vista all about then?
> >> >> > Control Panel\Programs and Features-classic style
> >> >> > or
> >> >> > Control Panel\Programs\Programs and Features-vista style
> >> >> >
> >> >> > seems like the add/remove in xp to me Theo.
> >> >> >
> >> >> > Jeff
> >> >> >
> >> >> > "Theo" <t...@discussions.microsoft.com> wrote in message
> >> >> > news:uYwXNO8...@TK2MSFTNGP04.phx.gbl...
> >> >> >> But his statement about the Add/Remove Programs only makes sense if
> >> >> >> there
> >> >> >> happens to be one in an 'upgrade' from XP to Vista. There is no
> >> >> >> Add/Remove Programs, per say, in Vista as there is in XP.
> >> >> >>
> >> >> >>
> >> >> >> Jane C wrote:
> >> >> >>> Mark upgraded from Windows XP, so possibly it was in Add/Remove
> >> >> >>> Programs
> >> >> >>> because it had been there in XP?
> >> >> >>> It certainly does not appear there in a clean install of Vista, as
> >> >> >>> Defender is inbuilt.
> >> >> >>>
> >> >> >
> >> >>
> >> >>
> >>
> >>
> >>
>
>

Ed Stoddard

unread,
Nov 25, 2007, 9:56:00 PM11/25/07
to
It won't install if you are running Vista! I know, I've tried several times,
and each time I'm told by the installer that I don't need this Windows
Defender as it is built-in to Vista!! The installer then simply allows you
to click a "Finish" button to exit without installing.

PaaNooS

unread,
Dec 30, 2007, 4:13:00 AM12/30/07
to
Unbelievable !!!
'cdnninja' you are God !!!
I had destroy windows registry because of defender malfunction.

Your suggestion was my solution !! Everything works perfect !!
Thank you very much !!

Pucara

unread,
Mar 13, 2009, 11:01:02 AM3/13/09
to
Hi,

I'm running Vista Business X86 32 bits. In my case Defender got broken when
I uninstalled Forefront Security Client. The above registry instructions wont
work for Vista. I fixed it doing the following:

Backup these registry keys from another vista with defender running:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend

Also my setup had missing the folders in %programData%\microsoft\windows
defender

The error pops up because of the registry key missing values AND the
definitions files missing in the above directory. To fix it you will need to
restore the registry values and copy the %programData%\microsoft\windows
defender from another vista. I can't post them here as they are 34MB large.
I'm just dumping the registry keys backup here. Once you replace the registry
and copy the files it will work.

Also note that the version posted of the registry before is not for windows
vista and will cause another error if you use it. It addas a value for
windows 2000.

Good Luck to all, it take me a while to fix this one.

Mariano.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender


*****
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=dword:00000000
"ProductUpdateAvailable"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Miscellaneous
Configuration]
"DeltaUpdateFailure"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Quarantine]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Real-Time
Protection\Checkpoints]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Reporting]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Scan]
"CheckForSignaturesBeforeRunningScan"=dword:00000001
"AutomaticallyCleanAfterScan"=dword:00000001
"LastScanType"=dword:00000001
"LastScanRun"=hex:b9,f5,4d,bc,f4,a2,c9,01

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Signature Updates]
"UpdateOnStartUp"=dword:00000000
"EngineVersion"="1.1.4405.0"
"ASSignatureVersion"="1.53.288.0"
"ASSignatureApplied"=hex:80,bc,4d,99,1a,a1,c9,01
"SignatureLocation"="C:\\ProgramData\\Microsoft\\Windows
Defender\\Definition Updates\\{C3B4D08D-5C6D-414D-BA1B-77310BDCF54D}"
"LastFallbackTime"=hex:57,78,92,3f,dd,59,c9,01

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Software Explorers]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Spynet]
"SpyNetReporting"=dword:00000001
"SpyNetReportingLocation"=hex(7):68,00,74,00,74,00,70,00,73,00,3a,00,2f,00,2f,\
00,73,00,70,00,79,00,6e,00,65,00,74,00,32,00,2e,00,6d,00,69,00,63,00,72,00,\
6f,00,73,00,6f,00,66,00,74,00,2e,00,63,00,6f,00,6d,00,2f,00,41,00,6e,00,74,\
00,69,00,4d,00,61,00,6c,00,77,00,61,00,72,00,65,00,53,00,65,00,72,00,76,00,\
69,00,63,00,65,00,73,00,2f,00,32,00,2f,00,53,00,70,00,79,00,6e,00,65,00,74,\
00,52,00,65,00,70,00,6f,00,72,00,74,00,53,00,72,00,76,00,63,00,2e,00,61,00,\
73,00,6d,00,78,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Threats]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
Defender\Threats\ThreatIDDefaultAction]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
Defender\Threats\ThreatSeverityDefaultAction]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
Defender\Threats\ThreatTypeDefaultAction]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\UX Configuration]

****


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend
****
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend]

"DisplayName"="Windows Defender"

0 new messages