Malware · critical

How to fixSECURITY_SERVICE_DISABLED

Security Center Service Blockage (Defender Disabler)

What this error means

Security Center Service Blockage (Defender Disabler) ranks as a critical-severity malware/security issue in our database. This diagnosis identifies active registry or group policy modifications that disable Windows Defender, Security Center services, and Windows Update, leaving the operating system vulnerable. This can also stem from malicious scripts executed with administrative privileges. The steps below are ordered to resolve this efficiently.

Before you begin

Save open work and back up important files. Use instructions for your exact device and software version. If Windows cannot start, see the startup guide.

Work through these checks

0 of 3 complete
01Re-enable Windows Defender services using the built-in Service Controller or Registry Editor.
  1. Re-enable Windows Defender services using the built-in Service Controller or Registry Editor.
What to expect

Check whether the original symptom still occurs.

If it does not help

Continue only if this check applies to your device. Consult its manufacturer if you are unsure.

Browse related errors
02Run System File Checker (SFC) and DISM to restore modified registry keys and system service files.
  1. Run System File Checker (SFC) and DISM to restore modified registry keys and system service files.
What to expect

Check whether the original symptom still occurs.

If it does not help

Continue only if this check applies to your device. Consult its manufacturer if you are unsure.

Browse related errors
03Reset local group policies back to default configurations.
  1. Reset local group policies back to default configurations.
What to expect

Check whether the original symptom still occurs.

If it does not help

Continue only if this check applies to your device. Consult its manufacturer if you are unsure.

Browse related errors

Possible causes

  • Malicious scripts executed with administrative privileges.
  • Trojan downloaders terminating system security dependencies.