Windows defender Error code: 0x80073b01

Anonymous

So yesterday I was on a site and a flash player update popped up and said that there was an update for "flash". I checked the certificate and it looked legit, so I had just clicked ask me later and then Windows Defender freaks out saying virus detected over and over. I tried clicking on the popup but nothing, then it said that windows needed to be restarted to delete a virus(or malware couldn't remember what it said). so I restarted it and i am not getting the error code. I also received an alert stating that windows could not make a backup because of a bad file or virus.

I have also reverted back to a previous backup and still the same problem.

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous

stunnedjack:

If you have not resolved the problem yet, please note that a possible fix has been posted (by user bhringer) here.

You may wish to try using HitmanPro 3.7 (v3.7.5.198-Beta) with Kickstart 2.2.

A HitmanPro.Kickstart User Manual & FAQ (PDF File) is available here.

"The latest variant of ZeroAccess/Sirefef disables Microsoft Security Essentials and Windows Defender by placing a Reparse Point (Junction/Symbolic Link) on the files of these products. The result is that these antivirus products are disabled by the malware! More info can be found here at KernelMode.info."

"This BETA release of HitmanPro now detects and removes these Reparse Points so that the mentioned AV products will function again."

See original Source.

<EDITED/ADDED>

On june 3, 2013, BETA release of HitmanPro referenced above was RTM'd to final version 3.7.6 Build 201, to include improvements, fixes and "additional repairs of folders and corresponding files in Winsxs folders. In addition, ACL security is reset". See: HitmanPro Release History.

For additional information, see: HitmanPro rescues anti-virus programs from malware attack.

To download the latest version of the tool, please visit HitmanPro 3.7 with Kickstart download site.

HitmanPro.Kickstart User Manual & FAQ (Video & PDF File) is available here.

<EDITED/ADDED>

See probably related/additional information:

MMPC's Encyclopedia entry on the Win32/Sirefef malware family. Please make sure to see the 'Additional remediation steps' section in this entry for more information/additional repairs that might be needed afterwards.
Microsoft Security Advisory 2846338.

Good Luck - Please post back and tell us how it goes.

PD.- David s. cole and Footos29 might wish to give it a shot whilst still awaiting for their disks :-)

0 comments

65 additional answers

Anonymous

2013-05-25T21:23:14+00:00

Close...But still no cigar!

The program detected & repaired this:

Repairs _____________________________________________________________________

Redirection: SymSrv.yes -> c:\windows\system32\config

Disables Windows Defender (C:\Program Files\Windows Defender)

Rebooted but still the same old 0x80073b01 error message. The 'Additional remediation steps' unfortunately only apply to Win 7 :(
Was this answer helpful?

0 comments No comments
Anonymous

2013-05-22T16:44:38+00:00

I though you originally stated you had a different (to 0x80073b01) error code?

Do you mean that it was triggered 'when' WD detected the rogue SCA and try to remove it? If not, how was SCA removed?

The rest (the inplace upgrade as a possible solution) we already know. My question is referred to 'anything else' you could share with us IRO the fix as per SA2846338 not working?

Thanks again for your feedback.

PD.- I'm not affected by this issue.
Was this answer helpful?

0 comments No comments
Anonymous

2013-05-22T02:23:45+00:00

I posted this on another thread after getting off phone with MS. My issue has different error code of 0x80073b01 when trying to open defender.

================================================================

They all agree that it's not a virus hiding---it is a broken Defender after the exposure...

What's the error code in your case?

WD broke 'after the exposure' to what? Did they mention SA2846338? Can you tell us anything else (appart from the 'repair' suggested) from your conversation about this issue?

Thanks in advance for your feedback.

My error code is the 0x80073b01 when trying to access defender console.

It was triggered by "System Care Antivirus" rogue scanner with 2 TrojanFakes whihc had been removed.

UPDATE on my situation. MS Called at 8:01 monday morning and they will be calling me back as soon as they know when the Win 8 Pro Media Edition disk is availlbale ...so I can then run the Repair, without losing my Desktop programs..

To reiterate what they have told me, a "inplace upgrade" can be done to repair that keeping all files and data and apps, AND also keeps desktop programs.

To to this one opens the appropriate Win 8Pro disk and run setip from the "sources' folder. I do not yet know the remaining steps. The disk i have is the regular Win 8pro and I need the media center Edition, which was out of stock in the store.

I recommend calling MS Win 8 department and having them walk you through it if you have the disk that is the current install on your machine. hope they aren't leading me on a wild goose chase. Supervisor confirmed it was doable as long as you have the right disk that matches the current installation. I was told the setup file was the one but no further steps were divulged till I get a copy of the Media edition and I didn't ask for other steps yet. The right phone number is 1-800- 642-7676 for the win 8 techs not the more general tech phone number and not the Virus Department which transfered me back to Win 8.
Was this answer helpful?

0 comments No comments
Anonymous

2013-05-21T23:24:27+00:00

I posted this on another thread after getting off phone with MS. My issue has different error code of 0x80073b01 when trying to open defender.

================================================================

They all agree that it's not a virus hiding---it is a broken Defender after the exposure...

What's the error code in your case?

WD broke 'after the exposure' to what? Did they mention SA2846338? Can you tell us anything else (appart from the 'repair' suggested) from your conversation about this issue?

Thanks in advance for your feedback.
Was this answer helpful?

0 comments No comments