I installed a faulty program that deleted my windows defender

We can try to shrink the OS partition via WinRE.

Create a Windows 10 USB setup disk. https://support.microsoft.com/en-us/windows/create-installation-media-for-windows-99a58364-8c02-206f-aa6f-40c3b507420d

Boot from it and access WinRE.

Open WinRE Command Prompt.

Run:

diskpart

list disk

select disk 0

list part

exit

Post the output.

Log Name: Application

Source: Microsoft-Windows-Wininit

Date: 12/24/2024 2:24:33 PM

Event ID: 1001

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: WINDOWS-QGK6LB9

Description:

Checking file system on C:

The type of the file system is NTFS.

A disk check has been scheduled.

Windows will now check the disk.

Stage 1: Examining basic file system structure ...

1704704 file records processed.

File verification completed.

Phase duration (File record verification): 17.93 seconds.

40045 large file records processed.

Phase duration (Orphan file record recovery): 0.00 milliseconds.

0 bad file records processed.

Phase duration (Bad file record checking): 0.75 milliseconds.

Stage 2: Examining file name linkage ...

99351 reparse records processed.

2339936 index entries processed.

Index verification completed.

Phase duration (Index verification): 48.02 seconds.

0 unindexed files scanned.

Phase duration (Orphan reconnection): 23.48 seconds.

0 unindexed files recovered to lost and found.

Phase duration (Orphan recovery to lost and found): 1.77 milliseconds.

99351 reparse records processed.

Phase duration (Reparse point and Object ID verification): 191.83 milliseconds.

Stage 3: Examining security descriptors ...

Cleaning up 25 unused index entries from index $SII of file 0x9.

Cleaning up 25 unused index entries from index $SDH of file 0x9.

Cleaning up 25 unused security descriptors.

Security descriptor verification completed.

Phase duration (Security descriptor verification): 134.98 milliseconds.

317617 data files processed.

Phase duration (Data attribute verification): 0.84 milliseconds.

CHKDSK is verifying Usn Journal...

3592032 USN bytes processed.

Usn Journal verification completed.

Phase duration (USN journal verification): 25.42 milliseconds.

Windows has scanned the file system and found no problems.

No further action is required.

232606402 KB total disk space.

126198856 KB in 1169524 files.

672220 KB in 317618 indexes.

     0 KB in bad sectors.

1796806 KB in use by the system.

 65536 KB occupied by the log file.

103938520 KB available on disk.

  4096 bytes in each allocation unit.

58151600 total allocation units on disk.

25984630 allocation units available on disk.

Total duration: 1.49 minutes (89956 ms).

Internal Info:

00 03 1a 00 2f b1 16 00 ad eb 22 00 00 00 00 00 ..../.....".....

2f 02 00 00 e8 81 01 00 00 00 00 00 00 00 00 00 /...............

Event Xml:

1001

0

4

0

0

0x80000000000000

141695

Application

WINDOWS-QGK6LB9

Checking file system on C:

The type of the file system is NTFS.

A disk check has been scheduled.

Windows will now check the disk.

Stage 1: Examining basic file system structure ...

1704704 file records processed.

File verification completed.

Phase duration (File record verification): 17.93 seconds.

40045 large file records processed.

Phase duration (Orphan file record recovery): 0.00 milliseconds.

0 bad file records processed.

Phase duration (Bad file record checking): 0.75 milliseconds.

Stage 2: Examining file name linkage ...

99351 reparse records processed.

2339936 index entries processed.

Index verification completed.

Phase duration (Index verification): 48.02 seconds.

0 unindexed files scanned.

Phase duration (Orphan reconnection): 23.48 seconds.

0 unindexed files recovered to lost and found.

Phase duration (Orphan recovery to lost and found): 1.77 milliseconds.

99351 reparse records processed.

Phase duration (Reparse point and Object ID verification): 191.83 milliseconds.

Stage 3: Examining security descriptors ...

Cleaning up 25 unused index entries from index $SII of file 0x9.

Cleaning up 25 unused index entries from index $SDH of file 0x9.

Cleaning up 25 unused security descriptors.

Security descriptor verification completed.

Phase duration (Security descriptor verification): 134.98 milliseconds.

317617 data files processed.

Phase duration (Data attribute verification): 0.84 milliseconds.

CHKDSK is verifying Usn Journal...

3592032 USN bytes processed.

Usn Journal verification completed.

Phase duration (USN journal verification): 25.42 milliseconds.

Windows has scanned the file system and found no problems.

No further action is required.

232606402 KB total disk space.

126198856 KB in 1169524 files.

672220 KB in 317618 indexes.

     0 KB in bad sectors.

1796806 KB in use by the system.

 65536 KB occupied by the log file.

103938520 KB available on disk.

  4096 bytes in each allocation unit.

58151600 total allocation units on disk.

25984630 allocation units available on disk.

Total duration: 1.49 minutes (89956 ms).

Internal Info:

00 03 1a 00 2f b1 16 00 ad eb 22 00 00 00 00 00 ..../.....".....

2f 02 00 00 e8 81 01 00 00 00 00 00 00 00 00 00 /...............

Check the Application log.

https://www.tenforums.com/tutorials/40822-read-chkdsk-log-event-viewer-windows-10-a.htmlhttps://www.winhelponline.com/blog/how-to-read-chkdsk-log-event-viewer/https://answers.microsoft.com/en-us/windows/forum/all/how-to-access-chkdsk-logreport/9dca9ba8-9e80-44b6-a879-9d1bba42090b

did everything, found application and services logs but can't seem to find Wininit entry, where it should be?

https://drive.google.com/file/d/1tUQYwoAYxyb01J033k_bsjTbGbBVA2Ez/view?usp=share_link

here is what I see

Hi, thank you for that information, doing the steps above will refresh the defender and get back, it might just be a conflict with the app you have, moreover, if you have already uninstalled the program, it should be good after the steps above, in addition, the steps will not delete any apps or files on the PC.