Author Topic: Windows defender deleting files downloaded (Read 8451 times)

stephenjones · « **on:** July 26, 2013, 07:27:52 am »

Hi guys, i recently cleaned up some malware off of a friend's pc. now every file I download with internet explorer is being flagged as a virus and deleted. I uninstalled the av(kaspersky) still no luck. Research showed its windows defender but I have no clue how to fix this. Also it may be related to zeroaccess. im almost certain no rootkits etc exists. i used malwarebytes, kaspersky, panda and webroot to scan.

Willy2 · « **Reply #1 on:** July 26, 2013, 01:10:59 pm »

When you already have an AV program running then you can disable WinDefender. Disable WinDefender & try again.
See: http://www.tweaking.com/forums/index.php/topic,1270.0.html

Shane · « **Reply #2 on:** July 26, 2013, 09:47:46 pm »

It is also possible the virus added something to the reg to block it. Let me know if it is Windefender or not and we can go from there

Shane

Shane · « **Reply #3 on:** August 27, 2013, 05:04:30 pm »

I just had a customer with the same problem.

Turns out a virus adds junction links to all the files in the windows defender folder.

You can rename the folder to download files again, and I have a way to repair those junctions and get windows defender working again

I will be adding it to my windows repair tool.

Shane

stephenjones · « **Reply #4 on:** August 28, 2013, 06:04:15 am »

Nice. glad u figured it out. it was driving me nuts here. Also noticed it messes with windows updates although this may just be unrelated and the pc had more infections .......

Willy2 · « **Reply #5 on:** September 09, 2013, 03:10:56 am »

@StephenJones: Did you try the lastest & improved version of Windows Repair (v1.9.16) ? It tackles a number of WinDefender problems.

The problems with Windows Update could also be "juntion link" related. The new WR version does tackle that problem as well. Your feedback is very welcome.

stephenjones · « **Reply #6 on:** September 09, 2013, 01:37:27 pm »

Thank you guys again. i will try this as soon as i run into this problem again. I was using malwarebytes anti-rootkit to fix these problems. After the program runs it has a plugin (fixdamage.exe) that auto runs sometimes or can be manually launched. it seems to do the trick as well as fix broken services windows updates etc.