Windows defender Error code: 0x80073b01

Anonymous
2013-05-13T04:39:35+00:00

So yesterday I was on a site and a flash player update popped up and said that there was an update for "flash". I checked the certificate and it looked legit, so I had just clicked ask me later and then Windows Defender freaks out saying virus detected over and over. I tried clicking on the popup but nothing, then it said that windows needed to be restarted to delete a virus(or malware couldn't remember what it said). so I restarted it and i am not getting the error code. I also received an alert stating that windows could not make a backup because of a bad file or virus.

I have also reverted back to a previous backup and still the same problem.

Windows for home | Previous Windows versions | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2013-05-25T16:13:08+00:00

stunnedjack:

If you have not resolved the problem yet, please note that a possible fix has been posted (by user bhringer) here.

You may wish to try using HitmanPro 3.7 (v3.7.5.198-Beta) with Kickstart 2.2.

A HitmanPro.Kickstart User Manual & FAQ (PDF File) is available here.

"The latest variant of ZeroAccess/Sirefef disables Microsoft Security Essentials and Windows Defender by placing a Reparse Point (Junction/Symbolic Link) on the files of these products. The result is that these antivirus products are disabled by the malware! More info can be found here at KernelMode.info."

"This BETA release of HitmanPro now detects and removes these Reparse Points so that the mentioned AV products will function again."

See original Source.

<EDITED/ADDED>

On june 3, 2013, BETA release of HitmanPro referenced above was RTM'd to final version 3.7.6 Build 201, to include improvements, fixes and "additional repairs of folders and corresponding files in Winsxs folders. In addition, ACL security is reset". See: HitmanPro Release History.

For additional information, see: HitmanPro rescues anti-virus programs from malware attack.

To download the latest version of the tool, please visit HitmanPro 3.7 with Kickstart download site.

HitmanPro.Kickstart User Manual & FAQ (Video & PDF File) is available here.

<EDITED/ADDED>

See probably related/additional information:

Good Luck - Please post back and tell us how it goes.

PD.- David s. cole and Footos29 might wish to give it a shot whilst still awaiting for their disks :-)

Was this answer helpful?

3 people found this answer helpful.
0 comments

65 additional answers

Sort by: Oldest
Most helpful Newest Oldest
  1. bhringer-9380 4,350 Reputation points Volunteer Moderator
    2013-05-16T05:09:01+00:00

    Wonder if this issue is related to the following?

    **Microsoft Security Advisory (2846338)**Vulnerability in Microsoft Malware Protection Engine Could Allow Remote Code Execution

    http://technet.microsoft.com/security/advisory/2846338

    Was this answer helpful?

    0 comments
  2. Anonymous
    2013-05-16T10:34:48+00:00

    Hmmmm......

    Could be since we've really seen an uptick in recent days.

    -steve

    Was this answer helpful?

    0 comments
  3. bhringer-9380 4,350 Reputation points Volunteer Moderator
    2013-05-16T15:06:21+00:00

    Seems that reports here and elsewhere that most (maybe all) of the machines affected appear to be 64-bit.

    Perhaps those affected have not been able to update to the new engine (v. 1.1.9506.0) Wonder if manual update could be done even though part of Defender and MSE is not functioning.

    Also wonder if the older regedit fix for disabled MSE would work.

    This issue arises because of a malware or by means of corrupted installation of Security Essentials. This can solved by the following methods.1. Open Registry Editor. Goto Start-> Run -> type regedit and pres enter.2. Please go to the location->  "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current Version\Image File Execution Options\  " and delete the entry msseces.exe and-> "HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\DisallowRun" and delete the entry msseces.exe.3. Restart the computer and now you will be able to open MSE.

    Alternatively, two of tweaking.com's repair tools might prove useful.

    Remove Policies Set By Infections

    http://www.tweaking.com/content/page/remove_policies_set_by_infections.html

    Restore Important Windows Services

    http://www.tweaking.com/content/page/restore_important_windows_services.html

    (note: both are included in Windows Repair-All In One)

    Obviously none of the above may work if in fact the issue is due to an infection and it has not been removed.

    Just thought I'd throw it out there hoping no one will suggest that's exactly what I should do (ie. throw out the suggestions I just made)

    Was this answer helpful?

    0 comments
  4. Anonymous
    2013-05-16T16:20:08+00:00

    See http://answers.microsoft.com/en-us/protect/forum/mse-protect_scanning/ms-essentials-shut-it-self-off-for-no-reason-two/3322d258-6854-4d93-b8ce-9f92fa2c9f20

    Good catch on your end...now, wonder what is the easiest fix?

    You may wish to add to the above thread if you've got any other suggestions...

    Regards...

    Was this answer helpful?

    0 comments