{"id":2011,"date":"2017-01-12T01:04:00","date_gmt":"2017-01-12T00:04:00","guid":{"rendered":"http:\/\/borncity.com\/win\/?p=2011"},"modified":"2022-06-23T20:58:13","modified_gmt":"2022-06-23T18:58:13","slug":"windows-10-defender-offline-scan-boot-loop-part-2","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2017\/01\/12\/windows-10-defender-offline-scan-boot-loop-part-2\/","title":{"rendered":"Windows 10: Defender Offline Scan boot loop – Part 2"},"content":{"rendered":"

[German<\/a>]In part 1 I've discussed, what's causing error code 0x80070578 in Windows Defender. In part 2 I will discuss, how to fix Windows Defender Offline boot loop, that prevents Windows 10 start.<\/p>\n

<\/p>\n

What's Windows Defender Offline (WDO)?<\/h3>\n

\"\"Microsoft provides Windows Defender Offline (WDO), to scan systems in an offline mode against malware. WDO has been integrated in Windows 10 since Anniversary Update (Version 1607). Here are the steps to use this mode.<\/p>\n

\"Start01\"<\/a><\/p>\n

1. Click to Start<\/em> and then select the Settings <\/em>icon to invoke the Settings<\/em> app.<\/p>\n

2. Within the Settings<\/em> app go to Update & security <\/em>and then to sub category Windows Defender<\/em>.<\/p>\n

\"WDO\"<\/a><\/p>\n

3. Scroll down in the right pane and click the button Scan Offline <\/em>(only available for administrator accounts).<\/p>\n

Windows 10 will reboot and you may see the Please wait<\/em> message.<\/p>\n

\"Booten<\/p>\n

The Windows Defender Offline will be loaded \u2013 you will see a progress bar.<\/p>\n

\"Windows<\/p>\n

If WDO is ready, you will see the Windows Defender GUI and a Defender scan runs in offline mode.<\/p>\n

\"Windows<\/p>\n

Windows Defender Offline uses always a quick scan. There is also an Update <\/em>tab (see screenshot below), where you are able to load new definition file updates via Internet.<\/p>\n

\"Windows<\/p>\n

For previous Windows versions Windows Defender Offline (WDO) may be launched from USB sticks or optical media. Microsoft has described the procedure here<\/a>. This Microsoft site<\/a> provides download links for 32- and 64-Bit-ISO files for WDO.<\/p><\/blockquote>\n

A problem with Windows Defender Offline scan in Windows 10<\/h3>\n

Windows 10 comes with a build-in WDO mode (see above), that bears the risk of a boot loop (see Windows 10: Windows Defender drops error 0x80070578<\/a> \u2013 Part 1). There is a possible scenario, where WDO tries to scan the disks during boot, but can't finish that. The user is advised to restart its machine. But after a restart the WDO scan starts again and ends in a reboot \u2013 the system is trapped in a boot loop. After I stumbled upon this error, I started searching the web. Here are a few hits from English Microsoft Answers forum.<\/p>\n

My computer won't boot to windows from windows defender offline<\/a>
\nMy Windows 10 is not able to Login Due to Defender<\/a>
\nWindows Defender Offline for Windows 10<\/a>
\nHow do I get my computer to boot up regularly after running the WDO scan?<\/a><\/p>\n

Then I tried to provoke this behavior within a virtual machine \u2013 but I failed. I terminated the scan, did multiple hard reset of my VM and also installed a third party AV software. Nevertheless Windows 10 was able to boot.<\/p>\n

What could be the reason for the boot loop?<\/h3>\n

Within part 1 (see Windows 10: Windows Defender drops error 0x80070578<\/a>) I mentioned Windows Defender error 0x80070578, that is based on outdated Windows Defender signature files. As mentioned above, Windows Defender Offline (WDO) is able to load new signature filtes via internet. I suppose, that third party antivirus software (Mc Afee, Norton, Kaspersky and so on) deactivates Windows Defender. So WDO isn't able to update his signature files. Maybe non compatible versions of antivirus software are responsible.<\/p>\n

If the user tries a WDO scan in Windows 10, the system is at risk for the boot loop. But my experience made within a virtual machine stands in contradiction to my first theory. First, I thought, it's a kind of \"broken by design\" WDO issue \u2013 but there is an option in WDO to terminate offline scan. Gladly I stumbled upon another scenario, that could explain the behavior. The German user facing the problem with WDO scan boot loop tried to do a Windows 10 reinstall and ended with a \"hard disc locked\" error. So the explanation is simple: A damaged system\/boot structure causes the boot loop \u2013 because WDO can't reset the boot option to a Windows 10 boot.<\/p>\n

First step: Safe important data<\/h3>\n

My first recommendation is to safe important data, before trying to repair the system. It's possible to use an offline backup software (like Paragon Disk Director Suite 15) and boot the machine with an emergency media (DVD, USB stick). Then create a system image backup and safe important user files.<\/p>\n

An alternative is: booting the machine in Windows PE (using a system repair disk, CD, as recovery drive, USB stick, or a Windows 10 install media and entering computer repair option). In Windows PE it's possible to copy user files via command prompt windows from the Windows disk to an external media (USB stick or USB drive).<\/p>\n

Tip: You can launch notepad.exe via command prompt window in Windows PE. Go to File \u2013 Open and use the Open dialog box als a mini file manager. Set the file type filter in Open dialog box to All files (*.\u00dc). Then you may the dialog box to navigate to your Windows drive and use context menu commands to copy files to an external drive. But note, that the \"file manager\" don't automatically refresh \u2013 so it seems, that file operations wasn't successful. Just press F5, to refresh the content of the dialog box. Also hidden files won't be shown.<\/p><\/blockquote>\n

Fix #1: Try an automatic startup repair<\/h3>\n

Interrupt the system boot process for 3 times (remove batteries from a notebook, switch power off), The the machine shall switch to Windows PE environment and tries to do a startup repair.<\/p>\n

\"Startreparatur\"<\/p>\n

If the automatic repair message occurs, just follow the instructions given on the screen. In some forums I found the suggestion to keep the shift key pressed during forcing the system into a restart. This should force the system into Windows PE with its extended start options.<\/p>\n

If automatic startup repair isn't invoked, you can try to boot the machine using an install or recovery media. If an install media is used, try Computer repair option, offered in the 2nd setup screen to enter Windows PE. You need to select the language settings (below is the dialog box from a German install media).<\/p>\n

\"Windows<\/p>\n

Then use the hyperlink Repair your computer <\/em>shown in setup dialog box (see also<\/a>).<\/em><\/p>\n

\"Computerreparaturoptionen<\/p>\n

Then you will see the Windows PE<\/a> environment \u2013 where you will see the page Chose an option<\/em>.<\/p>\n

<\/p>\n

Click Troubleshoot <\/em>and go to Advanced options <\/em>in the next page. <\/em>Within the Advanced options <\/em>page select the Startup Repair <\/em>tile and let Windows PE try to repair your start configuration (see also Windows 10 hangs with error code 0xc0000034<\/a>).<\/p>\n

<\/p>\n

If it goes well, this repair is successful and your machine will boot into Windows 10.<\/p>\n

Fix #2: Try a system restore<\/h3>\n

If fix #1 didn't work, boot your system into Windows PE and go to Advanced options <\/em>(see above). Select the tile System Restore<\/em>. Maybe Windows System restore is able to fix the issue and the machine will boot Windows 10 again. But I'm not too optimistic that fix #1 and fix #2 will cure the system.<\/p>\n

Fix #3: Try to repair the boot environment<\/h3>\n

In some cases the boot environment (BCD store) is damaged or not accessible. Try to boot the system with Windows PE (see Fix #1). Then\u00a0use diskpart<\/em> to set partition with \\boot<\/em> folder as active. In a last step\u00a0populate BCD store with necessary entries. According to this forum thread<\/a>\u00a0it could help. Have a look at the MS Answers thread Issue with updating BCD(Boot Configuration Data) in Windows 8.1<\/a>\u00a0for details how to rebuild BCD store.<\/p>\n

Fix #4: Try a System Image Recovery<\/h3>\n

If you have a system backup, boot into Windows PE and go to Advanced options <\/em>(see above). Select the tile System Image Recovery<\/em> and reload the system image backup. All data on your machine are lost.<\/p>\n

Fix #5: Reinstall Windows 10<\/h3>\n

If the fixes mentioned above won't help, grab a Windows 10 install media and try to re-install the operating system. All your data and installed programs are lost, but your machine should be back to life.<\/p>\n

Fix #6: Repair a Hard Disk Lock error<\/h3>\n

If you try to reinstall Windows 10, perhaps a \"Hard Disk Lock\" error is reported, and setup refuses to install. This was the case within the German MS Answers-thread<\/a>. This is also an explanation, why Windows Defender Offline can't terminate and a boot loop occurs.\u00a0 It you are facing this scenario, use my blog post How to fix Windows-Setup Hard Disk locked error<\/a> to cure your system.<\/p>\n

Ok, I hope, one of the fixes proposed above will help to end the Windows Defender Offline boot loop. If you come across another solution\/root cause, please feel free to left a comment.<\/p>\n

Articles:
\n<\/strong>Windows 10: Windows Defender drops error 0x80070578<\/a> \u2013 Part 1
\nWindows 10: Defender Offline Scan boot loop<\/a> \u2013 Part 2<\/p>\n

Similar articles
\n<\/strong>Win10 Wiki<\/a>
\nWindows 10: Open command prompt window as administrator
\n<\/a>Trick: How to upgrade to Windows 10 using a clean install
\n<\/a>Microsoft Windows and Office ISO download tool
\n<\/a>Windows 10 Version 1511 via Media Creation Tool \"is back\"<\/a>
\nHow to fix Windows-Setup Hard Disk locked error<\/a>
\nWindows 10: System restore fails with error 0x81000203<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

[German]In part 1 I've discussed, what's causing error code 0x80070578 in Windows Defender. In part 2 I will discuss, how to fix Windows Defender Offline boot loop, that prevents Windows 10 start.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[463,2],"tags":[623,621,622,76,105],"class_list":["post-2011","post","type-post","status-publish","format-standard","hentry","category-issue","category-windows","tag-boot-loop","tag-error-0x80070578","tag-wdo","tag-windows-10","tag-windows-defender"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/2011","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=2011"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/2011\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=2011"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=2011"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=2011"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}