Windows Security Windows only shows Shield Icon

Anonymous
2023-12-24T08:52:08+00:00

Split from this thread.

Hi Frank,

If you wish to fix Windows Security, please start a new thread and post the following logs. Post the link to the new thread here.

Step 1:

Step 2:

  • Download defender_diag.bat. Right-click on the file, click Properties, Unblock, and OK. Run the batch file as administrator.

(The Batch file queries Defender-related settings/Policies and outputs the results to a log file named defender.log. Upload this log to your OneDrive and share the link here.)

(How-To: Share OneDrive files and folders - Microsoft Support)

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2023-12-30T09:13:35+00:00

Those entries have no significance. Those entries show up in my system as well. You'll see a lot of Not Found entries for any operation you do. Usually, most of those entries have no significance.

You may try this if possible.

Download this REG file and save it to a folder named c:\reg\

Launch AdvancedRun (from Nirsoft) and start cmd.exe as TrustedInstaller.

In the TrustedInstaller Command Prompt, run:

  • reg.exe import c:\reg\securityhealth.reg
  • exit

This restores some essential registry keys used by Defender.

Was this answer helpful?

0 comments

94 additional answers

Sort by: Newest
Most helpful Newest Oldest
  1. Anonymous
    2023-12-27T17:20:30+00:00

    Please download securityhealth.zip and extract the files to a folder -- e.g., C:\SecurityHealth.

    (Ensure it's not a nested folder like "C:\SecurityHealth\SecurityHealth")

    Backup the folder "C:\Windows\System32\SecurityHealth\1.0.2207.20002-0" to another location.

    Boot into Windows RE Command Prompt and delete the contents of "C:\Windows\System32\SecurityHealth\1.0.2207.20002-0"

    While in WinRE Command Prompt, copy the contents from C:\SecurityHealth to "C:\Windows\System32\SecurityHealth\1.0.2207.20002-0" along with subfolders using the XCopy command.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2023-12-27T16:04:03+00:00

    I tried it again, and started (Control E) the capturing, one click before clicking start to start the windows sec serv.

    I closed the error message and stopped logging.

    The Zipfile with the PML is here: https://1drv.ms/f/s!At3helIxGZsEknlHW5PQcVhJDUtO?e=dDgVL4

    The only thing I see in the log file is a lot of entries with "SUCCESS" and several activities in the registry with "NAME NOT FOUND" or "FILE LOCKED".

    I don't know what this means or if you see more and can interpret the log.

    (It looks like there were issues with accessing cloud one drive? between 16:00 and 17:00 CET I received errors and could not reach the site)

    Was this answer helpful?

    0 comments
  3. Anonymous
    2023-12-27T13:17:45+00:00

    No. The "Windows Security Service" event is not logged. Also, please zip the PML.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2023-12-27T13:14:01+00:00

    The Logfile for the PML is here https://1drv.ms/f/s!At3helIxGZsEknlHW5PQcVhJDUtO?e=jTQEoN This recorded only the production of the error, going to services.msc, scroll to Windows Security, double click and try to start the service.

    The process on the internet described how to start and stop the procmon was differen than the version downloaded, so I do hope the log file logged the event sequence, if not, let me know, I can try again, of if you have another link to the procmon, let me know.

    I noticed there is an option to create a bootlog with procmon, if that can be usefull let me know.

    Was this answer helpful?

    0 comments