Windows Security: Recommended Actions

Hello

We will start with a PC diagnostic:

Read the entire procedure carefully before posting the reports
Do not post them directly in the messages as they are unreadable and incomplete

The reports FRST.txt and Addition.txt are expected.

All reports must be hosted on https://security-x.fr/up/ and you need to indicate the obtained links in your response.

---------------------------------------------------------------------------------------------

--> The SmartScreen filter may trigger an alert. Click on Actions or More information then on Run anyway

---------------------------------------------------------------------------------------------

--> Download the FRST version of Farbar, compatible with your system and save the file on your Desktop.

--> For a 32-bit system
--> For a 64-bit system

How to find out which version, 32-bit or 64-bit, is running on my system?

--> Wait for your browser to prompt you to download to save, without clicking anywhere, especially not on the page sponsors.
--> Close all applications, including your browser.
--> Double-click on FRST.exe and click Yes to accept the Disclaimer.
--> On Vista, Windows 7 / 8 and 10, you need to launch the file by right-clicking -> Run as administrator.
--> Wait until it indicates The tool is ready to run.
--> In the main menu, click on Scan and wait for the scan to complete.
--> At the end of the scan, the reports FRST.txt and Addition.txt are created. Post these reports in your next response.
--> The reports are saved in the same location as the tool and under C:\FRST\Logs

Thank you for your response,

Here are the two requested links:

For FRST.exe: https://up.security-x.fr/file.php?h=R193e92e8ee2805995fe4c187c3921ad8

For Addition.exe: https://up.security-x.fr/file.php?h=R540c23e07ba526888ac08c946f7ee0cd

RE_

Nothing special in the reports, I'll send you another one

=> Download Farbar Service Scanner (if the download doesn't start automatically, click on "click here")

=> Run it by right-clicking run as administrator

=> Make sure the following options are checked

=> Click on "Scan"

=> An analysis report (FSS.txt) will be created in the folder where FSS.exe is located.

=> Post the report HERE and provide the link in your response.

Good evening,

Here is the link to the FSS report: https://up.security-x.fr/file.php?h=R53a9d651a7f8241ce1ce27fd37537e01

RE_

No problem detected.

Can you take a screenshot of the security center? (You can post it like the reports)

=> Click on the Windows Defender shield in the taskbar

=> Go full screen and take a screenshot like this:

---

Good evening,

Here is the link to the screenshot from the security center: https://up.security-x.fr/file.php?h=R60ed371e5443af546bd2df43e8a12f56

RE_

Everything is fine on this side. Check:

=> Windows Update -> Do you have any failed updates?

=> Security Center -> Virus Protection -> Protection updates -> Check for updates -> Check for updates -> What does it show?

Good evening,

=> There are no failed updates indicated in Windows Update.

However, these few lines intrigue me in the Addition file of the first analysis.

Date: 2022-09-12 20:12:25
Description:
Microsoft Defender Antivirus encountered an error while updating the security intelligence.
New version of the security intelligence:
Previous version of the security intelligence: 1.321.69.0
Update source: Microsoft Update Server
Security intelligence type: Anti-virus
Update type: Full
User: NT AUTHORITY\SYSTEM
Current engine version:
Previous engine version: 1.1.17300.4
Error code: 0x80240022
Error description: The program cannot check for definition updates.

However, definition updates have been downloaded and installed since.

=> When searching for updates, the system informs me that "the security intelligence is up to date".

RE_

However, these few lines intrigue me in the Addition file of the first analysis.

Yes, that's why I indicated (in addition to Windows Update):

=> Security Center -> Virus Protection -> Protection Updates -> Check for updates -> Check for updates -> what does it yield?

Good evening,

Here is what I get after the last manipulation: https://up.security-x.fr/file.php?h=Rd5c0b52ecddfaf625708b0593c37b8d8

Thank you for taking the time to look into the issue,

Have a good evening.

RE_

Try this:

--> Copy what is below from start:: to end:: (without pasting it anywhere)

start::
closeprocesses:
createrestorepoint:
deletevalue: HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify|PastIconsStream
deletevalue: HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify|IconStreams
emptytemp:
end::

--> Open FRST (or FRST64) as an administrator and click on Fix

--> A fixlog file is created in the same location as FRST, post it

--> Let me know if you still have the problem

Good evening,

Here is the link to the fixlog file: https://up.security-x.fr/file.php?h=R1962ff67938fa740fd12fcd2338754f9

Unfortunately, the issue has not been resolved.

RE_

I think it's a bug with the icon, but it's strange that the previous fix didn't repair it.

Try:

=> Right-click the taskbar

=> Taskbar settings

=> Taskbar overflow area

=> Uncheck Windows security

=> Restart

=> Repeat the procedure to enable the icon

=> Click on the hidden icon in the taskbar and, without releasing, bring it to the taskbar

=> Do you still have the problem?

Good evening,

I have unchecked Windows Security in the overflow area of the taskbar corner. The icon became visible directly on the taskbar.

I restarted, then checked Windows Security in the overflow area of the taskbar corner. The icon went back to the hidden icons space of the taskbar.

I performed the last manipulation.

The issue has not been resolved.

RE_

I don't see anything more to do, for me, it's a bug, hoping that the next update will fix the problem.

You can wait for it to happen automatically or you can launch it manually

For FRST:

To automatically remove all files/folders created by FRST and the tool itself, rename FRST/FRST64.exe to uninstall.exe and run it. The process requires a restart

Good evening,

Thank you for looking into the issue.

However, I am now facing a new problem, perhaps related to the first one: I am unable to download the new Windows update that the article in your link discusses.

Here is the error message: https://up.security-x.fr/file.php?h=R7266337f0f163a73fec3b33d2c82514b

I have encountered this problem before, and I had to reset Windows (10 at the time). In both cases, the issue appeared after I clicked on the “pause updates” option and then clicked on it again to cancel, an action that seems trivial to me but might actually be significant?

Thank you in advance.

By trying to solve the problem on my own, sometimes I completely mess up...

I followed all the steps of this tutorial that seemed quite serious: https://windowsreport.com/0x800705aa/

Problem: after step 6.9., I can no longer access my account: I am prevented from entering my PIN code, I cannot log into my session.

Thank you in advance!

RE_

There are quite a few issues with the 22H2 update for Win11

Regarding your last problem, did you check Hide all Microsoft services?

At the login screen, do you not have Other sign-in options? How do you usually connect? Password?

I did not check the option "Hide all Microsoft services": "deselect the checkbox for Hide all Microsoft services" in the article, certainly an error.

I log in with a password.

Now, the login screen tells me that "there was a problem and your PIN is not available. Click to set up your PIN again," and there is an option "Set up my PIN." When I click on it, a window appears to inform me that an application is needed for this task and it suggests looking for one in the Store, an option that does not work (nothing opens).

I didn't actually uncheck the option Hide all Microsoft services: "deselect the checkbox for Hide all Microsoft services" in the article, certainly a mistake.

Yes, big mistake because you disabled Microsoft services, some of which are essential for the proper functioning of Windows.

Can you take a picture of the login screen when you start the PC without clicking anywhere?