Unscheduled Scan of Defender

J

Jorge Bravo

Even though I do not have a scheduled scan programmed with defender (at
least I do not think so)

every time I start my laptop McAfee VirusScan Online protection brings up
the following box (what does it mean?):

McAfee has detected a potentially unauthorized change to your computer.

Details

SystemGuard Name: Shared Task Scheduler

Change: File Modified

More Info

SystemGuard Description: The SharedTaskScheduler registry key contains a
list of programs that run when Windows starts. Some spyware or other
potentially unwanted programs modify this key and add themselves to the list
without your permission.

Process: C:\Program Files\Windows Defender\MsMpEng.exe

Process Name: Service Executable

Process Publisher: Microsoft Corporation

Affected Items: C:\WINDOWS\Tasks\MP Scheduled Scan.job

If you did not expect this change, McAfee recommends that you block it. If
you expected this change, allow it.
 
B

Bill Sanderson MVP

This certainly looks like the actions Windows Defender would be taking in
re-scheduling a daily scheduled scan, assuming that you start the laptop
once a day.

I would recommend checking on whether a scheduled scan is set--in Tools
Options.

If it is, in fact, not set, I would set one, apply that change, restart the
machine, and then unset it.

Another possible choice might be to do a repair or update of Windows
Defender--there have been issues before where actual activity has been
different from the chosen settings and a repair has corrected this--start,
control panel, add or remove programs, check here for support information,
repair, or change, update--not sure there's any difference betwixt.
 
J

Jorge Bravo

Thank you Bill

However, when I try to repair I get a box saying that it can't find
WindowsDefender[1].msi and this file is nowhere on my computer.

What should I do next, please?

Thanks again
 
G

Guest

Hello Jorge,

Delete any entry about Windows Defender's with:
Windows Installer cleanup tool: read the info carefully before using:
http://support.microsoft.com/default.aspx?scid=kb;en-us;290301



Install Windows Installer 3.1 v2 (3.1.4000.2435) is availªble here:
http://support.microsoft.com/kb/893803

Locate your file msi.dll (with search if you are not sure where it's
located) and confirm what the version is, either from it's properties or just
passing your cursor over it. If it's not the latest which is 3.1.4000.2435,
then:
http://support.microsoft.com/kb/893803/


Can you go to Windows Update, select Express (Get high-priority updates),
and apply all offered updates
http://update.microsoft.com


Once that is finished, can you verify the update installs? There are many
pre-requisite files which are needed from windows update and signature update
with windows defender will fail until you have these f!les.


I'd recommend re-downloading WD, and saving to a known location--like the
desktop.
After the download is complete, disable real-time protection by your
antivirus for long enough to do the installation. please disable or turn off
as much other software that always runs as you can--real time antivirus
scanning, any other antispyware software, (Stop all programs that are open in
the bottom taskbar) etc.

I hope this post is helpful, let us know how it works ºut.

Еиςеl
--


Jorge Bravo said:
Thank you Bill

However, when I try to repair I get a box saying that it can't find
WindowsDefender[1].msi and this file is nowhere on my computer.

What should I do next, please?

Thanks again




Bill Sanderson MVP said:
This certainly looks like the actions Windows Defender would be taking in
re-scheduling a daily scheduled scan, assuming that you start the laptop
once a day.

I would recommend checking on whether a scheduled scan is set--in Tools
Options.

If it is, in fact, not set, I would set one, apply that change, restart
the machine, and then unset it.

Another possible choice might be to do a repair or update of Windows
Defender--there have been issues before where actual activity has been
different from the chosen settings and a repair has corrected this--start,
control panel, add or remove programs, check here for support information,
repair, or change, update--not sure there's any difference betwixt.
 
B

Bill Sanderson MVP

I think as an alternative in this case, I'd recommend re-downloading Windows
Defender and installing over the version in place. This should correct the
installer issue and fix the other issue as well.

--

Engel said:
Hello Jorge,

Delete any entry about Windows Defender's with:
Windows Installer cleanup tool: read the info carefully before using:
http://support.microsoft.com/default.aspx?scid=kb;en-us;290301



Install Windows Installer 3.1 v2 (3.1.4000.2435) is availªble here:
http://support.microsoft.com/kb/893803

Locate your file msi.dll (with search if you are not sure where it's
located) and confirm what the version is, either from it's properties or
just
passing your cursor over it. If it's not the latest which is
3.1.4000.2435,
then:
http://support.microsoft.com/kb/893803/


Can you go to Windows Update, select Express (Get high-priority updates),
and apply all offered updates
http://update.microsoft.com


Once that is finished, can you verify the update installs? There are many
pre-requisite files which are needed from windows update and signature
update
with windows defender will fail until you have these f!les.


I'd recommend re-downloading WD, and saving to a known location--like the
desktop.
After the download is complete, disable real-time protection by your
antivirus for long enough to do the installation. please disable or turn
off
as much other software that always runs as you can--real time antivirus
scanning, any other antispyware software, (Stop all programs that are open
in
the bottom taskbar) etc.

I hope this post is helpful, let us know how it works ºut.

????l
--


Jorge Bravo said:
Thank you Bill

However, when I try to repair I get a box saying that it can't find
WindowsDefender[1].msi and this file is nowhere on my computer.

What should I do next, please?

Thanks again




Bill Sanderson MVP said:
This certainly looks like the actions Windows Defender would be taking
in
re-scheduling a daily scheduled scan, assuming that you start the
laptop
once a day.

I would recommend checking on whether a scheduled scan is set--in Tools
Options.

If it is, in fact, not set, I would set one, apply that change, restart
the machine, and then unset it.

Another possible choice might be to do a repair or update of Windows
Defender--there have been issues before where actual activity has been
different from the chosen settings and a repair has corrected
this--start,
control panel, add or remove programs, check here for support
information,
repair, or change, update--not sure there's any difference betwixt.

--

Even though I do not have a scheduled scan programmed with defender
(at
least I do not think so)

every time I start my laptop McAfee VirusScan Online protection brings
up
the following box (what does it mean?):

McAfee has detected a potentially unauthorized change to your
computer.

Details

SystemGuard Name: Shared Task Scheduler

Change: File Modified

More Info

SystemGuard Description: The SharedTaskScheduler registry key contains
a
list of programs that run when Windows starts. Some spyware or other
potentially unwanted programs modify this key and add themselves to
the
list
without your permission.

Process: C:\Program Files\Windows Defender\MsMpEng.exe

Process Name: Service Executable

Process Publisher: Microsoft Corporation

Affected Items: C:\WINDOWS\Tasks\MP Scheduled Scan.job

If you did not expect this change, McAfee recommends that you block
it.
If
you expected this change, allow it.
 
J

Jorge Bravo

Hi, still problems

Downloaded WindowsDefender to the Desktop and then tried to install it from
there, but the installation won't run and a box comes up saying that:

A network error occurred while attempting to read from the file:
C:\Me\Desktop\WindowsDefender[1].msi

So, now what?

Thanks for your help.




Bill Sanderson MVP said:
I think as an alternative in this case, I'd recommend re-downloading
Windows Defender and installing over the version in place. This should
correct the installer issue and fix the other issue as well.

--

Engel said:
Hello Jorge,

Delete any entry about Windows Defender's with:
Windows Installer cleanup tool: read the info carefully before using:
http://support.microsoft.com/default.aspx?scid=kb;en-us;290301



Install Windows Installer 3.1 v2 (3.1.4000.2435) is availªble here:
http://support.microsoft.com/kb/893803

Locate your file msi.dll (with search if you are not sure where it's
located) and confirm what the version is, either from it's properties or
just
passing your cursor over it. If it's not the latest which is
3.1.4000.2435,
then:
http://support.microsoft.com/kb/893803/


Can you go to Windows Update, select Express (Get high-priority updates),
and apply all offered updates
http://update.microsoft.com


Once that is finished, can you verify the update installs? There are many
pre-requisite files which are needed from windows update and signature
update
with windows defender will fail until you have these f!les.


I'd recommend re-downloading WD, and saving to a known location--like the
desktop.
After the download is complete, disable real-time protection by your
antivirus for long enough to do the installation. please disable or turn
off
as much other software that always runs as you can--real time antivirus
scanning, any other antispyware software, (Stop all programs that are
open in
the bottom taskbar) etc.

I hope this post is helpful, let us know how it works ºut.

????l
--


Jorge Bravo said:
Thank you Bill

However, when I try to repair I get a box saying that it can't find
WindowsDefender[1].msi and this file is nowhere on my computer.

What should I do next, please?

Thanks again




This certainly looks like the actions Windows Defender would be taking
in
re-scheduling a daily scheduled scan, assuming that you start the
laptop
once a day.

I would recommend checking on whether a scheduled scan is set--in
Tools
Options.

If it is, in fact, not set, I would set one, apply that change,
restart
the machine, and then unset it.

Another possible choice might be to do a repair or update of Windows
Defender--there have been issues before where actual activity has been
different from the chosen settings and a repair has corrected
this--start,
control panel, add or remove programs, check here for support
information,
repair, or change, update--not sure there's any difference betwixt.

--

Even though I do not have a scheduled scan programmed with defender
(at
least I do not think so)

every time I start my laptop McAfee VirusScan Online protection
brings up
the following box (what does it mean?):

McAfee has detected a potentially unauthorized change to your
computer.

Details

SystemGuard Name: Shared Task Scheduler

Change: File Modified

More Info

SystemGuard Description: The SharedTaskScheduler registry key
contains a
list of programs that run when Windows starts. Some spyware or other
potentially unwanted programs modify this key and add themselves to
the
list
without your permission.

Process: C:\Program Files\Windows Defender\MsMpEng.exe

Process Name: Service Executable

Process Publisher: Microsoft Corporation

Affected Items: C:\WINDOWS\Tasks\MP Scheduled Scan.job

If you did not expect this change, McAfee recommends that you block
it.
If
you expected this change, allow it.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top