Windows defender Error code: 0x80073b01

Anonymous
2013-05-13T04:39:35+00:00

So yesterday I was on a site and a flash player update popped up and said that there was an update for "flash". I checked the certificate and it looked legit, so I had just clicked ask me later and then Windows Defender freaks out saying virus detected over and over. I tried clicking on the popup but nothing, then it said that windows needed to be restarted to delete a virus(or malware couldn't remember what it said). so I restarted it and i am not getting the error code. I also received an alert stating that windows could not make a backup because of a bad file or virus.

I have also reverted back to a previous backup and still the same problem.

Windows for home | Previous Windows versions | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2013-05-25T16:13:08+00:00

stunnedjack:

If you have not resolved the problem yet, please note that a possible fix has been posted (by user bhringer) here.

You may wish to try using HitmanPro 3.7 (v3.7.5.198-Beta) with Kickstart 2.2.

A HitmanPro.Kickstart User Manual & FAQ (PDF File) is available here.

"The latest variant of ZeroAccess/Sirefef disables Microsoft Security Essentials and Windows Defender by placing a Reparse Point (Junction/Symbolic Link) on the files of these products. The result is that these antivirus products are disabled by the malware! More info can be found here at KernelMode.info."

"This BETA release of HitmanPro now detects and removes these Reparse Points so that the mentioned AV products will function again."

See original Source.

<EDITED/ADDED>

On june 3, 2013, BETA release of HitmanPro referenced above was RTM'd to final version 3.7.6 Build 201, to include improvements, fixes and "additional repairs of folders and corresponding files in Winsxs folders. In addition, ACL security is reset". See: HitmanPro Release History.

For additional information, see: HitmanPro rescues anti-virus programs from malware attack.

To download the latest version of the tool, please visit HitmanPro 3.7 with Kickstart download site.

HitmanPro.Kickstart User Manual & FAQ (Video & PDF File) is available here.

<EDITED/ADDED>

See probably related/additional information:

Good Luck - Please post back and tell us how it goes.

PD.- David s. cole and Footos29 might wish to give it a shot whilst still awaiting for their disks :-)

Was this answer helpful?

3 people found this answer helpful.
0 comments

65 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2013-05-16T05:03:24+00:00

    I would recommend you to first download Microsoft Safety Scanner & Kaspersky Removal Tool 2011 in another uninfected PC, copy them in pen drive, start your infected PC in safe mode (How to start Windows in Safe Mode), plug in your pen drive and first scan with Safety Scanner then Kaspersky one (scanning with two scanners decrease chances of leftovers).

    Was this answer helpful?

    0 comments
  2. Anonymous
    2013-05-16T03:34:26+00:00

    I've been seeing a fair number of reports of 0x80073b01 for both MSE and Windows Defender of late and I suspect that the error and inability to start the program to perform a scan is due to an undetected infection.

    See:

    http://answers.microsoft.com/en-us/windows/forum/windows\_7-performance/error-code-0x80073b01-and-ms-essentials-disabled/44a2d57e-d520-4d90-8a02-54be88ef3982?msgId=262b8f72-e8fc-4454-9e6e-8de9f80e9ea6

    Try Hitman Pro Trial Version: http://www.surfright.nl/en/hitmanpro This program may be run from a flash drive.

    Try TDSS Killer: http://www.bleepingcomputer.com/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller TDSS Killer may be run from a flash drive.

    Try adwcleaner: http://www.bleepingcomputer.com/download/adwcleaner/

    You may wish to download (on an uninfected PC) one or more of the following rescue scanners to create bootable media to scan the infected PC (list courtesy of forum member, GreginMich):

    http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline

    http://support.kaspersky.com/viruses/rescuedisk?level=2

    http://www.f-secure.com/en\_EMEA-Labs/security-threats/tools/rescue-cd/

    http://www.bitdefender.com/support/How-to-create-a-BitDefender-Rescue-CD-627.html

    http://www.avira.com/en/support-download-avira-antivir-rescue-system

    http://www.avg.com/us-en/avg-rescue-cd-download

    http://www.freedrweb.com/livecd/

    http://www.superantispyware.com/portablescanner.html

    http://support.kaspersky.com/faq/?qid=208283363

    Each rescue scanner will miss things – because none of them will have a perfectly complete and up-to-date set of definitions; so you might need to use several of these rescue scanners, or something like the Shardana Antivirus Rescue Disk Utility, which creates a custom bootable CD or flash drive that includes multiple rescue scanners:

    http://www.sarducd.it/

    You can start here:  https://consumersecuritysupport.microsoft.com/  (which will lead to the paid support options of http://www.answerdesk.com if you are in the US)

    In other regions not served by the link above, go here:   http://Support.microsoft.com/security and go to the “assisted support” or contact us menu.

    This web site - http://www.bleepingcomputer.com -  contains details for many of the common infections, often immediately after they began to appear in the wild, and instructions are provided for how to remove the infections using their malware removal guides. They also have forums where you can seek help from people who specialize in malware removal.

    This may also be helpful - How to get rid of malware:

    http://answers.microsoft.com/en-us/windows/forum/windows\_vista-security/how-to-get-rid-of-malware/ba80504b-61f1-4d71-960f-b561798b7b42

    -steve

    Was this answer helpful?

    0 comments
  3. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  4. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more