Windows Defender Offline Update Windows 10
Gretchen Vansise
Hi everybody,
My windows started to act weird recently. Seemed like problems with explorer : Elements of menu taskbar were disappearing, folder's elements were disappearing, sound would stop working on occasions etc.
So I run the offline defender scan overnight on my lenovo y700 laptop. ..
Unfortunately my laptop died. When I plug in the charger, the light of power control on the laptop wont go on, but when i plug in an external drive to the USB, it will have the light on.
windows defender offline update windows 10
Do you know what might have happened to my laptop? Did any of it happen to other users?
please help, thanks!
PS sorry for bad label on the post, but the forum didnt let me post my own
I have a virus on my HP laptop (system drive encrypted with Veracrypt). I tried to run Defender Offline Scan - a process that should take up to fifteen minutes. I'm able to launch the scan from Windows Security, but the process won't complete. This is what occurs:
Laptop confirms it is restarting.
Veracrypt asks for password.
Boots to a 'Please Wait' screen, but only for ten seconds.
Veracypt asks for password again.
Boots, and moments later I'm taken to the regular Windows login screen.
My troubles aren't over though - the offline scan results are not showing up in Windows. This seems to be a common issue. The scan gets up to around 95% before quitting and going back to the windows login screen. I'm troubleshooting that now.
I'm confused about the behavior you're experiencing. I would've thought, using the build in offline scan should work even with encryption in place, as on-the-fly-decryption should take place before Defender is started.
Anyway, I wouldn't use the built-in antivirus software of the infected system in the first place, as you cannot guarantee that it's not been compromised. You should put the affected drive into another, clean computer as a secondary drive, mount it and perform an offline scan from this clean system.
I'm inclined to agree with you about starting over with a new install of Windows. However, I'm still curious to see if Defender finds anything, so I might try your suggestion of hooking it up as a secondary drive and see what happens with a scan. Cheers.
Would any fellow members of this community who are running up-to-date versions of Windows 10 please try running a Windows Defender offline scan and let me know if it completes successfully, with the scan results subsequently displayed as the last scan results in Windows security settings? Yesterday, after getting a strange error message from Windows Defender on one laptop, I tried running offline scans on three different HP laptops. In all three cases, the laptop rebooted without warning while the scan was in progress. After rebooting, there was no indication that an offline scan had occurred. In Windows security settings, the last scan reported was the previous quick or full scan. This behavior is disconcerting on multiple levels...
Method 1: To help troubleshoot error messages and other issues, you can start Windows by using a minimal set of drivers and startup programs. This kind of startup is known as a "clean boot." A clean boot helps eliminate software conflicts.
From Start, search for msconfig.
Select System Configuration from the search results.
On the Services tab of the System Configuration dialog box, tap or click to select the Hide all Microsoft services check box, and then tap or click Disable all.
On the Startup tab of the System Configuration dialog box, tap or click Open Task Manager.
On the Startup tab in Task Manager, for each startup item, select the item and then click Disable.
Close Task Manager.
On the Startup tab of the System Configuration dialog box, tap or click OK, and then restart the computer.
That said, If the information I've provided was helpful, give us some reinforcement by clicking the Accepted Solution and Kudos buttons, that'll help us and others see that we've got the answers!
Thank you for the reply, Jeet_singh. I will try your suggestions as soon as possible. I do not have any third-party antivirus products on any of these computers. As for your Method 1, I'm not sure if that's relevant, because the offline scan causes the computer to reboot and run the scan before Windows loads.
No one has replied to this message confirming that the Windows Defender offline scan is indeed working as it should. Would anyone be willing to run a scan as a test? It takes about 15 minutes. Start menu, Settings, Update & Security, Windows Security, Virus & Threat Protection, Scan Options, Windows Defender Offline Scan. After the scan completes and your computer restarts, you can confirm that it completed successfully if you return to the Virus & Threat Protection screen and it says that the last scan was the offline scan that you just performed. On the three HP laptops I have tested, full scans are successful but offline scans (which are supposed to be able to detect and eliminate viruses that can hide while Windows is running) will not complete. Thank you to anyone who is willing to test this.
What I have done so far is the following: I performed a System Restore taking the system back to before the last major Windows 10 update that had been installed within the past two weeks or so. I also downloaded the Trend Micro Rescue Disk tool and burned a bootable disk with their latest antivirus definitions. (Trend Micro is an antivirus company based in Tokyo that I believe to be trustworthy.) I also tried using a Bitdefender Rescue disk, but that seemed to be trying to get too fancy--it booted my computer in a Linux environment and tried to connect to the Internet itself to download its latest definitions before scanning. It seemed to be unable to install the necessary drivers for my networking hardware. In any case, I did a complete scan with the Trend Micro Rescue Disk (after doing the System Restore) and it detected no threats. Also, I have not received any more threat notifications from Windows Defender.
The error message that I originally received said that I had a Trojan virus called Win32-Occamy.C. Supposedly the infected file was D:\Eautorun.exe, but my computer doesn't even have a D drive. I just confirmed that no D drive shows up in Disk Management under Computer Management. When I looked at the details in Windows Defender, it said that the alert level was serious and that the status was "Error." The scan summary notifications that I received from Windows Defender said something to the effect that the threats had been dealt with, but after a short time they disappeared from the Windows Defender history, so it was all very weird.
Thank you. I have not had any further problems, or warnings from Windows Defender. However, I do still wonder why the Windows Defender offline scan does not run correctly on any of my three computers. I guess this will remain a mystery. Maybe it's a Microsoft bug...
To simply say thanks for my efforts to assist you, please click the "Thumbs Up" button to give me a Kudos.
And mark my public post as Accepted Solution to help others find a similar solution as you have.
Just ran one tonight turned my back while PC was booting so don't know if scan started but when I checked the screen it was stuck on a keyboard language setup screen with US english selected but screen was frozen. Had to hit power button to restart.
Not surprised if this feature doesn't work because defender keeps flagging microsoft files as ones being blocked by Controlled Folder Access. Any antivirus that cant recognize legitimate files on the HD can't be worth much. Thinking of paying for a malwarebytes subscription.
I have ran a microsoft defender to scan the pc along with malwarebytes. When a windows defender opens, it's telling me that the thread service has been stopped. I went ahead and checked it into services.msc and it is running fine. Right clicking it shows start, stop, restart and other tasks unavailable to press (grayed out). When I press a restart now on defender, it does nothing. Tried to enable realtime protection. I didn't have it off and malwarebytes free was also fine with it, however suddenly I find it off. I press on it, prompt appears to allow defender to make changes, pressed yes, but nothing happens. Downloaded microsoft safety scanner, it detected no issues. ran sfc and dism, none show any issues. Repaired to older system point, no help. Anything else that might be issue?
I have downloaded the tool, opened it, and it was not accessible to my screen reading technology, even by using an optical character recognition system. I could read what was on screen, but nothing was clickable. Any other options?
In settings, I have noticed microsoft was asking me some account identity verification stuff. I guess an account was compromised due to some malware or something I have no idea. I removed it. I re-enabled a windows update, even cleared a cache, specifically ran the following commands:
I suspect that compromised account might have done some changes to my system which, simply, were not the best to have. Re-attaching the logs in case there are some changes and you need to be aware of them. Meanwhile, to ensure protection, I activated a free trial of malwarebytes to have all layers of security in place untill the issue is resolved.
I see. Then the only option I see is the recovery to fix that. A quick question though: on that pc, when I first bought it, a linux was installed. Then when I have tried to install windows, some storage drivers were missing, I could not access the storage to format disk. to overcome that, I have put some intel rapid storage technology driver or something like that. Would I need to create a bootable media and put that driver in again?
Or, when resetting and keeping my files and documents, would I need to obtain those drivers as well? when performing a offline scan with windows defender, it got stuck within the restarting process. Only option was to just press the power button, wait, press it again and boot it up again.
d3342ee215