Windows defender Error code: 0x80073b01

Anonymous
2013-05-13T04:39:35+00:00

So yesterday I was on a site and a flash player update popped up and said that there was an update for "flash". I checked the certificate and it looked legit, so I had just clicked ask me later and then Windows Defender freaks out saying virus detected over and over. I tried clicking on the popup but nothing, then it said that windows needed to be restarted to delete a virus(or malware couldn't remember what it said). so I restarted it and i am not getting the error code. I also received an alert stating that windows could not make a backup because of a bad file or virus.

I have also reverted back to a previous backup and still the same problem.

Windows for home | Previous Windows versions | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2013-05-25T16:13:08+00:00

stunnedjack:

If you have not resolved the problem yet, please note that a possible fix has been posted (by user bhringer) here.

You may wish to try using HitmanPro 3.7 (v3.7.5.198-Beta) with Kickstart 2.2.

A HitmanPro.Kickstart User Manual & FAQ (PDF File) is available here.

"The latest variant of ZeroAccess/Sirefef disables Microsoft Security Essentials and Windows Defender by placing a Reparse Point (Junction/Symbolic Link) on the files of these products. The result is that these antivirus products are disabled by the malware! More info can be found here at KernelMode.info."

"This BETA release of HitmanPro now detects and removes these Reparse Points so that the mentioned AV products will function again."

See original Source.

<EDITED/ADDED>

On june 3, 2013, BETA release of HitmanPro referenced above was RTM'd to final version 3.7.6 Build 201, to include improvements, fixes and "additional repairs of folders and corresponding files in Winsxs folders. In addition, ACL security is reset". See: HitmanPro Release History.

For additional information, see: HitmanPro rescues anti-virus programs from malware attack.

To download the latest version of the tool, please visit HitmanPro 3.7 with Kickstart download site.

HitmanPro.Kickstart User Manual & FAQ (Video & PDF File) is available here.

<EDITED/ADDED>

See probably related/additional information:

Good Luck - Please post back and tell us how it goes.

PD.- David s. cole and Footos29 might wish to give it a shot whilst still awaiting for their disks :-)

Was this answer helpful?

3 people found this answer helpful.
0 comments

65 additional answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2013-05-16T20:40:47+00:00

    I'm having the same issue on my factory installed Windows 8 system.. The problem started when Windows Defender said I had a virus, I apparently STUPIDLY removed it after it was in quarantine ... it was WIN/FAKEREAN ?? and something about Trojan Doppler...I have run every scan under the sun to no avail and I STILL am getting error code 0x80073b01.... what now

    Was this answer helpful?

    0 comments
  2. Anonymous
    2013-05-16T21:20:53+00:00

    http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Rogue%3aWin32%2fFakeRean

    You really need to start your own thread since we do not know that your issue/computer is identical to that of the original poster.  The error code may cover more than one problem.  

    How to ask questions in the Microsoft Forum: http://answers.microsoft.com/en-us/Page/faq#faqGettingAnswers5

    Need to know the specific name of the malware if possible.

    I don't understand from your post whether you think the malware has been eliminated.  If WD quarantined the malware it did not need to be removed.

    Have you run Windows Updates?

    Can you manually update Windows Defender?

    I'm going to give you some malware removal suggestions (some of them also appear in the post of Steve Boots) and request you try all of them in the sequence suggested until you see no evidence of malware...need to know specifically what programs you have used rather than telling us "every scan under the sun to no avail."

    Try these “free” on demand scanners which will not interfere with your resident AV program -  you might need to run them in Safe Mode or Safe Mode With Networking:

    Go to www.malwarebytes.org and download, install, update and run the free version – just follow the prompts.  You may need to rename the installation file to 123.exe or something similar to prevent the malware from disabling/blocking the installation.  Or you might want to download the installation file to a flash drive or CD and then install Malwarebytes on the infected computer.

    And/or

    Try Hitman Pro Trial Version: http://www.surfright.nl/en/hitmanpro   This program may be run from a flash drive if necessary. 

    And/or

    Try TDSS Killer:  http://www.bleepingcomputer.com/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller  TDSS Killer may be run from a flash drive if necessary.

    And/or

    Try the Eset Online Scanner: http://go.eset.com/us/online-scanner

    And/or

    Let's try the MSRT even though you may have run it a couple of days ago with your monthly Windows Updates: http://www.microsoft.com/security/pc-security/malware-removal.aspx

    And/Or

    Try this MS scanner: http://www.microsoft.com/security/scanner/en-us/default.aspx

    And/Or

    You may need to use one or more of the following offline scanners - you'll need to burn a CD using a different computer and change the boot sequence on your computer to run the scan - instructions are included with the links:

    http://support.kaspersky.com/viruses/rescuedisk?level=2

    http://www.f-secure.com/en\_EMEA-Labs/security-threats/tools/rescue-cd/

    http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline

    Good luck... 

    http://voices.washingtonpost.com/securityfix/2009/09/what\_to\_do\_when\_rogue\_anti-vir.html#more

    http://ask-leo.com/why\_dont\_antimalware\_tools\_work\_better.html

    Was this answer helpful?

    0 comments
  3. Anonymous
    2013-05-16T22:01:53+00:00

    Thanks so much for the reply, this is the first time I've ever posted and didn't understand what I needed to do

    Was this answer helpful?

    0 comments
  4. bhringer-9380 4,350 Reputation points Volunteer Moderator
    2013-05-16T22:57:12+00:00

    See http://answers.microsoft.com/en-us/protect/forum/mse-protect_scanning/ms-essentials-shut-it-self-off-for-no-reason-two/3322d258-6854-4d93-b8ce-9f92fa2c9f20

     

    Good catch on your end...now, wonder what is the easiest fix?

     

    You may wish to add to the above thread if you've got any other suggestions...

     

    Regards...

    My other thought on this was that perhaps a "fix" for the vulnerabilty was tried through definitons updates (before the new engine was released) and it didn't quite settle right with MSE or Defender. [much like binding effects of too much cheddar :-)]

    Certainly wouldn't be the first time.

    Noticed in most related posts uninstall/reinstall seemed to be problematic, so that may not be a solution.

    Was this answer helpful?

    0 comments