{"id":26827,"date":"2022-07-09T11:19:45","date_gmt":"2022-07-09T05:49:45","guid":{"rendered":"http:\/\/198.58.113.91\/blog\/?p=26827"},"modified":"2026-03-18T16:14:53","modified_gmt":"2026-03-18T10:44:53","slug":"microsoft-defender-service-error-2-cannot-find-file","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/microsoft-defender-service-error-2-cannot-find-file\/","title":{"rendered":"Microsoft Defender Service Error 2 “Cannot Find the File Specified”"},"content":{"rendered":"

In the aftermath of a malware attack and subsequent removal using specialized programs, you may notice that the Microsoft Defender Antivirus service fails to start on your Windows 10 or 11 computer. One of the common errors users encounter is “Error 2” (0x80070002<\/code>), which denotes that a file is missing.<\/p>\n

\"defender<\/p>\n

Windows could not start the Microsoft Defender Antivirus Service service on Local Computer.\r\n\r\nError 2: The system cannot find the file specified.<\/pre>\n
The System Event log records one of the following errors:<\/p>\n
Log Name: System\r\nSource: Service Control Manager\r\nDate: 7\/8\/2022 10:56:31 PM\r\nEvent ID: 7000\r\nTask Category: None\r\nLevel: Error\r\nKeywords: Classic\r\nUser: N\/A\r\nComputer: Vostro-3470\r\nDescription:\r\nThe Microsoft Defender Antivirus Service service failed to start due to the following error: \r\nThe system cannot find the file specified.\r\n\r\n<\/pre>\n
Log Name: System\r\nSource: Service Control Manager\r\nDate: 7\/8\/2022 10:52:17 PM\r\nEvent ID: 7000\r\nTask Category: None\r\nLevel: Error\r\nKeywords: Classic\r\nUser: N\/A\r\nComputer: Vostro-3470\r\nDescription:\r\nThe WinDefend service failed to start due to the following error: \r\nThe system cannot find the file specified.<\/pre>\n
Cause<\/h2>\n
The error occurs because malware may have deleted the following “Platform” folder or some of its subfolders:<\/p>\n
C:\\ProgramData\\Microsoft\\Windows Defender\\Platform<\/pre>\n
The Platform folder usually has two sub-folders. One of them has the latest platform update for Microsoft Defender Antivirus, and the other one has the previous platform update that acts as a fallback.<\/p>\n
As the Microsoft Defender service registration (“ImagePath” registry value) is pointing to MsMpEng.exe<\/code> in one of the missing Platform folders, the service control manager encounters “Error 2” when you attempt to start the service.<\/p>\n
RELATED:<\/strong> Windows Defender Service Missing; Security at a glance page is Empty<\/a><\/div>\n
Resolution<\/h2>\n
To resolve “Error 2” when starting the Defender service, revert to the Inbox CAMP version of the service executable MsMpEng.exe. Follow these steps to do so:<\/p>\n
    \n
  1. Download windefend.zip<\/a> and save it to the desktop. The zip file has the registry fixes for Windows 10 22H2 and Windows 11 22H2\/23H2\/24H2 to repair the “WinDefend” and “SecurityHealthService” services.<\/li>\n
  2. Start regedit.exe<\/code> under Trusted Installer rights. For more information on how to do that, see the article How to Run Programs as TrustedInstaller<\/a><\/li>\n
  3. In the Registry Editor window, import the windefend REG file via the File menu.<\/li>\n
  4. Exit the Registry Editor and restart Windows.<\/li>\n<\/ol>\n
    Note:<\/strong> The registry file above sets the image path for the Windows Defender service to the following executable (a.k.a Inbox CAMP version of MsMpEng.exe<\/code>):<\/p>\n
    \"%ProgramFiles%\\Windows Defender\\MsMpEng.exe\"<\/pre>\n
    That means you’ll need to install the latest platform update immediately after the Defender service becomes functional.<\/p>\n
    \nNote that the following command to revert to the Inbox CAMP version of Defender doesn’t work if the Microsoft Defender service is not running:<\/p>\n
    \"%programfiles%\\Windows Defender\\MpCmdRun.exe\" -resetplatform<\/pre>\n
    Hence the registry editing (registry fix) procedure was suggested above.\n<\/p><\/div>\n
    \"warningWindows Defender service should be functional after a restart. After the Defender service starts, Windows Update will fetch the latest available platform update. Be sure<\/strong> to install the Windows Defender Platform update that shows up on the Windows Update page.<\/p>\n
    \"defender<\/p>\n
    Additional Information<\/h3>\n
    After installing the latest platform update via Microsoft Update, Microsoft Defender accordingly updates its service “ImagePath” registry value. For example, if the newest platform update you downloaded is 4.18.2205.7<\/code>, the WinDefend service’s ImagePath<\/code> registry value is automatically set to:<\/p>\n
    \"C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.2205.7-0\\MsMpEng.exe\"<\/pre>\n
    \"defender<\/p>\n
    I hope this article helped you fix “Error 2” when starting the Microsoft Defender service.<\/p>\n","protected":false},"excerpt":{"rendered":"
    In the aftermath of a malware attack and subsequent removal using specialized programs, you may notice that the Microsoft Defender Antivirus service fails to start on your Windows 10 or 11 computer. One of the common errors users encounter is “Error 2” (0x80070002), which denotes that a file is missing.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[8,869],"tags":[191,441,490,661],"class_list":["post-26827","post","type-post","status-publish","format-standard","hentry","category-windows-10","category-windows-11","tag-error-messages","tag-registry","tag-services","tag-windows-defender"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":18890,"url":"https:\/\/www.winhelponline.com\/blog\/windows-defender-service-missing-security-page-empty\/","url_meta":{"origin":26827,"position":0},"title":"Windows Defender Service Missing; Security at a glance page is Empty","author":"Ramesh","date":"September 26, 2020","format":false,"excerpt":"In the aftermath of malware infection, when you open the Services MMC on a Windows 10 or 11 computer, you may find that the Windows Defender (\"Microsoft Defender Antivirus Service\") service is missing from the Services MMC. The Windows Security settings \"Security at a glance\" page may show up empty\u2026","rel":"","context":"In "Windows 10"","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"advancedrun start regedit.exe","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/09\/advancedrun-start-regedit.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/09\/advancedrun-start-regedit.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/09\/advancedrun-start-regedit.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":5973,"url":"https:\/\/www.winhelponline.com\/blog\/defender-service-error-577-disableantivirus-registry\/","url_meta":{"origin":26827,"position":1},"title":"Fix: Windows Defender Error 577 | Service Fails to Start","author":"Ramesh","date":"November 23, 2017","format":false,"excerpt":"The \"Security and Maintenance\" Control Panel applet or the Action Center in Windows 10 may warn you that Windows Defender is disabled and no anti-virus is protecting your system. If you open the Windows Defender interface, it offers to Turn On protection, but the button doesn't work. In the Services\u2026","rel":"","context":"In "Windows 10"","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"windows defender error 577","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/windows-defender-577-error.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/windows-defender-577-error.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/windows-defender-577-error.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/windows-defender-577-error.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":54263,"url":"https:\/\/www.winhelponline.com\/blog\/windows-script-host-error-run-vbs\/","url_meta":{"origin":26827,"position":2},"title":"Windows Script Host error in AppData\\Local\\Updates\\Run.vbs. The System cannot find the file specified","author":"Ramesh","date":"June 17, 2023","format":false,"excerpt":"When you login to your account,\u00a0you may see a Windows Script Host error similar to the following: Windows Script Host Script: C:\\Users\\{username}\\AppData\\Local\\Updates\\Run.vbs Line: 31 Char: 1 Error: The system cannot find the file specified. Code: 80070002 Source: (null) Additionally, on some systems, you may see a WindowsService.exe popup window that\u2026","rel":"","context":"In "Windows 10"","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"windowsservice.exe malware","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/06\/windowsservice-exe-pop-up.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/06\/windowsservice-exe-pop-up.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/06\/windowsservice-exe-pop-up.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/06\/windowsservice-exe-pop-up.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":25816,"url":"https:\/\/www.winhelponline.com\/blog\/startupchecklibrary-winscomrssrv-dll-missing-error-startup\/","url_meta":{"origin":26827,"position":3},"title":"[Fix] StartupCheckLibrary.dll and Winscomrssrv.dll Error at Startup","author":"Ramesh","date":"January 20, 2022","format":false,"excerpt":"When you log in to your Windows computer, the following error message windows may pop up: RunDLL There was a problem starting StartupCheckLibrary.dll The specified module could not be found. RunDLL There was a problem starting winscomrssrv.dll The specified module could not be found. Additionally, you may see the following\u2026","rel":"","context":"In "Utilities"","block_context":{"text":"Utilities","link":"https:\/\/www.winhelponline.com\/blog\/category\/utilities\/"},"img":{"alt_text":"startupchecklibrary.dll malware startup error","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/01\/malwarebytes-history.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/01\/malwarebytes-history.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/01\/malwarebytes-history.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/01\/malwarebytes-history.png?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/01\/malwarebytes-history.png?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":5966,"url":"https:\/\/www.winhelponline.com\/blog\/windows-defender-disabled-by-malwarebytes-antivirus-protection\/","url_meta":{"origin":26827,"position":4},"title":"Fix: Malwarebytes Disables Defender or 3rd Party Anti-Virus","author":"Ramesh","date":"November 22, 2017","format":false,"excerpt":"After installing Malwarebytes Premium 14-day trial or licensed product, your anti-virus software (e.g., Microsoft Defender Antivirus) may get disabled automatically. In this scenario, when you attempt to start the Microsoft Defender Antivirus Service\u00a0(WinDefend) via the Services console, it shows the following error, and the service wouldn't start. The Windows Defender\u2026","rel":"","context":"In "Utilities"","block_context":{"text":"Utilities","link":"https:\/\/www.winhelponline.com\/blog\/category\/utilities\/"},"img":{"alt_text":"malwarebytes security center register","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/mbam-register-wsc-off.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/mbam-register-wsc-off.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/mbam-register-wsc-off.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/mbam-register-wsc-off.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":8717,"url":"https:\/\/www.winhelponline.com\/blog\/enable-or-disable-defender-shortcut-command-line\/","url_meta":{"origin":26827,"position":5},"title":"Enable or Disable Windows Defender Using Shortcut or Command-line","author":"Ramesh","date":"April 18, 2019","format":false,"excerpt":"Windows Defender, the built-in anti-virus program in Windows, has useful features such as cloud-based protection, offline scanning, limited periodic scanning, tamper protection, controlled folder access, etc. Almost every aspect of Windows Defender can be managed or automated using the MpCmdrun.exe command-line tool and PowerShell cmdlets. There are times when you\u2026","rel":"","context":"In "Utilities"","block_context":{"text":"Utilities","link":"https:\/\/www.winhelponline.com\/blog\/category\/utilities\/"},"img":{"alt_text":"advancedrun command-line to disable defender","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/04\/advanced-run-command-line-defender.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/26827","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/comments?post=26827"}],"version-history":[{"count":0,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/26827\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/media?parent=26827"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/categories?post=26827"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/tags?post=26827"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}