{"id":29754,"date":"2022-11-11T10:39:44","date_gmt":"2022-11-11T05:09:44","guid":{"rendered":"http:\/\/198.58.113.91\/blog\/?p=29754"},"modified":"2022-11-11T10:46:56","modified_gmt":"2022-11-11T05:16:56","slug":"defender-advanced-threat-protection-mssense-exe-crashes","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/defender-advanced-threat-protection-mssense-exe-crashes\/","title":{"rendered":"MSSense.exe Crashes: Windows Defender Advanced Threat Protection Service Executable"},"content":{"rendered":"

Many Windows 10\/11 Pro and Server 2012 R2 systems are encountering repeated mssense.exe crashes. It’s the service executable for the Windows Defender Advanced Threat Protection Service (“Sense”), found on Pro and higher editions.<\/p>\n

When mssense.exe crashes, WerFaultSecure.exe creates a report and a crash dump every time. This can happen every 5-10 minutes and thus impacts your device’s performance negatively to a great extent. Here is a sample mssense.exe event log entry retrieved via the Reliability Monitor:<\/p>\n

Source\r\nWindows Defender Advanced Threat Protection Service Executable\r\n\r\nSummary\r\nStopped working\r\n\r\nDescription\r\nFaulting Application Path: C:\\Program Files\\Windows Defender Advanced Threat Protection\\MsSense.exe\r\n\r\nProblem signature\r\nProblem Event Name: APPCRASH\r\nApplication Name: MsSense.exe\r\nApplication Version: 10.8210.19041.2006\r\nApplication Timestamp: 3f017b42\r\nFault Module Name: MsSense.dll\r\nFault Module Version: 10.8210.19041.2130\r\nFault Module Timestamp: b2119acf\r\nException Code: c0000005\r\nException Offset: 00000000003edaf5\r\nOS Version: 10.0.19045.2.0.0.256.48\r\nLocale ID: 1033\r\nAdditional Information 1: 0000\r\nAdditional Information 2: 00000000000000000000000000000000\r\nAdditional Information 3: 0000\r\nAdditional Information 4: 00000000000000000000000000000000<\/pre>\n
\"defender<\/p>\n
Here’s a screenshot from the System Information tool MSInfo32.exe<\/a>:<\/p>\n
\"defender<\/p>\n
I deleted the service!<\/h3>\n
As my Windows 10 Pro is a standalone unit, I deleted the service. It’s been five days since I deleted the service, and things are good. Here’s how I deleted the service.<\/p>\n
First, I backed up the service by exporting the service registry key to a REG file<\/a>, using this command:<\/p>\n
reg export \"HKLM\\SYSTEM\\CurrentControlSet\\Services\\Sense\" d:\\sense.reg<\/pre>\n
Then, I deleted the service<\/a> using this command:<\/p>\n
SC.EXE DELETE SENSE<\/pre>\n
(Alternatively, disabling the service by setting the Start<\/code> registry value to 4<\/code> might also work. But there are chances that the Microsoft Defender Antivirus engine will revert the value.)<\/em><\/p>\n
That’s it! No more mssense.exe crashes. I decided to leave it that way until Microsoft addresses this issue in a future update.<\/p>\n","protected":false},"excerpt":{"rendered":"
Many Windows 10\/11 Pro and Server 2012 R2 systems are encountering repeated mssense.exe crashes. It’s the service executable for the Windows Defender Advanced Threat Protection Service (“Sense”), found on Pro and higher editions.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[8,869],"tags":[191,441,490],"class_list":["post-29754","post","type-post","status-publish","format-standard","hentry","category-windows-10","category-windows-11","tag-error-messages","tag-registry","tag-services"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":5966,"url":"https:\/\/www.winhelponline.com\/blog\/windows-defender-disabled-by-malwarebytes-antivirus-protection\/","url_meta":{"origin":29754,"position":0},"title":"Fix: Malwarebytes Disables Defender or 3rd Party Anti-Virus","author":"Ramesh","date":"November 22, 2017","format":false,"excerpt":"After installing Malwarebytes Premium 14-day trial or licensed product, your anti-virus software (e.g., Microsoft Defender Antivirus) may get disabled automatically. In this scenario, when you attempt to start the Microsoft Defender Antivirus Service\u00a0(WinDefend) via the Services console, it shows the following error, and the service wouldn't start. The Windows Defender\u2026","rel":"","context":"In "Utilities"","block_context":{"text":"Utilities","link":"https:\/\/www.winhelponline.com\/blog\/category\/utilities\/"},"img":{"alt_text":"malwarebytes security center register","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/mbam-register-wsc-off.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/mbam-register-wsc-off.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/mbam-register-wsc-off.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/mbam-register-wsc-off.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":5125,"url":"https:\/\/www.winhelponline.com\/blog\/windows-defender-disabled-real-time-protection-virus\/","url_meta":{"origin":29754,"position":1},"title":"Microsoft Defender: “Managed by your administrator” or “Your IT administrator has limited access”","author":"Ramesh","date":"January 23, 2017","format":false,"excerpt":"In the aftermath of a malware attack, the Windows Defender Security settings page may show the message Some settings are managed by your organization\u00a0or This setting is managed by your administrator. The real-time protection and cloud-based protection options may remain disabled or grayed out. Here is what the Windows Defender\u2026","rel":"","context":"In "Windows 10"","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"Microsoft Defender Antivirus group policy settings","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/01\/windows-defender-gpedit-ui.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/01\/windows-defender-gpedit-ui.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/01\/windows-defender-gpedit-ui.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/01\/windows-defender-gpedit-ui.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":17887,"url":"https:\/\/www.winhelponline.com\/blog\/windows-defender-identifies-same-threat-repeatedly\/","url_meta":{"origin":29754,"position":2},"title":"Windows Defender Shows the Same Threat Repeatedly. How to Clear the Protection History","author":"Ramesh","date":"August 14, 2020","format":false,"excerpt":"On some Windows 10 and 11 computers, Microsoft Defender Antivirus may repeatedly warn about the same threat, although you've taken the necessary action (remediated) on that threat. When you click \"Start actions\" after choosing \"Remove\", nothing happens. Windows Defender would keep showing that non-existent threat. Cause This is caused by\u2026","rel":"","context":"In "Windows 10"","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"detectionhistory folder contents","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/08\/defender-detection-history-delete.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/08\/defender-detection-history-delete.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/08\/defender-detection-history-delete.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/08\/defender-detection-history-delete.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":18890,"url":"https:\/\/www.winhelponline.com\/blog\/windows-defender-service-missing-security-page-empty\/","url_meta":{"origin":29754,"position":3},"title":"Windows Defender Service Missing; Security at a glance page is Empty","author":"Ramesh","date":"September 26, 2020","format":false,"excerpt":"In the aftermath of malware infection, when you open the Services MMC on a Windows 10 or 11 computer, you may find that the Windows Defender (\"Microsoft Defender Antivirus Service\") service is missing from the Services MMC. The Windows Security settings \"Security at a glance\" page may show up empty\u2026","rel":"","context":"In "Windows 10"","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"advancedrun start regedit.exe","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/09\/advancedrun-start-regedit.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/09\/advancedrun-start-regedit.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/09\/advancedrun-start-regedit.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":3689,"url":"https:\/\/www.winhelponline.com\/blog\/start-windows-defender-offline-scan\/","url_meta":{"origin":29754,"position":4},"title":"How to Start Microsoft Defender Offline Scan in Windows 10\/11","author":"Ramesh","date":"August 4, 2016","format":false,"excerpt":"Malware is more complex today than it was many years ago. It operates at the filter driver, service, or rootkit level, and eliminating it is tough. Sometimes, you need to boot to the Windows RE environment and then delete the core malware files and services added to your Windows installation.\u2026","rel":"","context":"In "Windows 10"","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"Microsoft Defender Offline scan - Virus and threat protection - Windows Security","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/08\/wdo-scan-4.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/08\/wdo-scan-4.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/08\/wdo-scan-4.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":6620,"url":"https:\/\/www.winhelponline.com\/blog\/set-up-onedrive-yellow-exclamation-defender-security-center\/","url_meta":{"origin":29754,"position":5},"title":"[Fix] Windows Defender Yellow Exclamation Icon and “Set up OneDrive” Warning","author":"Ramesh","date":"September 20, 2018","format":false,"excerpt":"The Windows 10 action center may show a prompt with a black exclamation inside a yellow triangle icon in the Notification area. When you click on that, it opens Windows Defender Security Center.\u00a0In the Windows Defender Security Center, underneath the \"Virus & threat protection\" icon the exclamation mark inside a\u2026","rel":"","context":"In "Windows 10"","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"windows defender set up onedrive - yellow exclamation warning","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2018\/09\/defender-set-up-onedrive-yellow-exclamation.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2018\/09\/defender-set-up-onedrive-yellow-exclamation.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2018\/09\/defender-set-up-onedrive-yellow-exclamation.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2018\/09\/defender-set-up-onedrive-yellow-exclamation.png?resize=700%2C400&ssl=1 2x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/29754","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/comments?post=29754"}],"version-history":[{"count":0,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/29754\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/media?parent=29754"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/categories?post=29754"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/tags?post=29754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}