MsMpEng.exe crashes on occasion.

From my Event Log:

Faulting application name: MsMpEng.exe, version: 4.18.24090.11, time stamp: 0xcc823329
Faulting module name: mpengine.dll, version: 1.1.25010.7, time stamp: 0x5ee6bd48
Exception code: 0xc0000005
Fault offset: 0x00000000000d90da
Faulting process id: 0x1450
Faulting application start time: 0x1db87e5f5015a19
Faulting application path: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe
Faulting module path: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1A81ED11-121E-49F8-8F5B-56B3CC5676D2}\mpengine.dll
Report Id: 2e5941c9-e023-4abc-952a-e27d8fd133b6
Faulting package full name:
Faulting package-relative application ID:

Followed by:

The Microsoft Defender Antivirus Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service.
Event Data:
0000 57 00 69 00 6E 00 44 00 65 00 66 00 65 00 6E 00 W.i.n.D.e.f.e.n.
0010 64 00 00 00 d...

The error is intermittent. Sometimes I can cause the crash by scanning a large folder. In most cases Defender will restart itself. Sometimes it won't and clicking on the Restart button doesn't start it. In this case I have to reboot.
Out of curiosity I did a clean install of W11 24H2 on the same PC and I still got the error even though Windows 11 was as vanilla as it gets. I also ran RAM checks and they all passed. I also set my UEFI to it's default non performance state which also did not prevent the error.

I attached a crash dump.

Reset windows defender.

Tried that. That does not reset Defender per se, just the GUI controlling it i.e., Windows Security App.

streetwolf said:

Tried that. That does not reset Defender per se, just the GUI controlling it i.e., Windows Security App.

Click to expand...

Did you try just downloading Defender and installing it over top of the current one?

You can't reinstall Defender, it is baked into Windows. You can't uninstall it either. About all you can do is stop it from working by disabling a few of it's services.

streetwolf said:

You can't reinstall Defender, it is baked into Windows. You can't uninstall it either. About all you can do is stop it from working by disabling a few of it's services.

Click to expand...

I dunno... I don't even use it. It was just a guess. But I'll take your word for it.

I use Bitdefender Internet Security.

Ghot said:

I dunno... I don't even use it. It was just a guess. But I'll take your word for it.

I use Bitdefender Internet Security.

Click to expand...

In all probability Defender is still on your system but made inactive by BitDefender unless they found a way of getting rid of it completely which I doubt.

streetwolf said:

In all probability Defender is still on your system but made inactive by BitDefender unless they found a way of getting rid of it completely which I doubt.

Click to expand...

No... you are correct. It's still there but has been taken over by Bitdefender.



I dunno if this will help you or not...




In Autoruns, you need to un-check "Hide Windows Entries".









While you're waiting for @zbook, you could run this command... Dism /Online /Cleanup-Image /RestoreHealth


In case the ISO you're using is glitched.