Updates for Windows Defender caused a crash in the repairing damaged files function: How to fix?

Some users of Windows 10 unexpectedly encountered the inability to recover damaged files using sfc /scannow. The likely cause of the problem is a new version of Windows Defender.

The file scanning function in the built-in Windows System File Checker tool starts as expected, but then the process ends and the following notification appears:

“Windows Resource Protection found damaged files, but could not fix some of them. Details about online recovery are included in the CBS registry file in windir \Logs\CBS\CBS.log. For example, C:\Windows\Logs\CBS\CBS.log. Details about the restoration of offline included in the registry file /OFFLOGFILE flag”.

However, according to readers of the Bleeping Computer portal, as shown by checking the aforementioned files using the fsutil hardlink list command, the hashes of their links are OK.

Despite the fact that the problem arose immediately after the release of the planned July updates from Microsoft, it was caused by an update for Windows Defender.

Monthly updates for Windows regularly cause certain problems, but in this case, they seem to have nothing to do with it, because the failure in sfc /scannow occurred on systems where the July updates were not installed yet.

Version 1.297.823.0 may be a problem in update for Windows Defender, but Microsoft has not yet confirmed this. Probably, the manufacturer will fix the problem with the release of the next update.

How to fix?

Some users have reported being able to fix the error by running the following DISM commands:

    DISM/Online/Cleanup-Image/CheckHealth
    DISM/Online/Cleanup-Image/ScanHealth
    DISM/Online/Cleanup-Image/RestoreHealth

For those who do not wish to use these commands, you can wait for Microsoft to resolve the issue.

Sending
User Review
0 (0 votes)
Comments Rating 0 (0 reviews)

About the author

Brendan Smith

Cybersecurity analyst with 15+ years digging into malware and threats, from early days reverse-engineering trojans to leading incident responses for mid-sized firms.

At Gridinsoft, I handle peer-reviewed breakdowns of stuff like AsyncRAT ransomware—last year, my guides helped flag 200+ variants in real scans, cutting cleanup time by 40% for users. Outside, I write hands-on tutorials on howtofix.guide, like step-by-step takedowns of pop-up adware using Wireshark and custom scripts (one post on VT alternatives got 5k reads in a month).

Certified CISSP and CEH, I’ve run webinars for 300+ pros on AI-boosted stealers—always pushing for simple fixes that stick, because nobody has time for 50-page manuals. Tools of the trade: Splunk for hunting, Ansible for automation, and a healthy dose of coffee to outlast the night shifts.

Leave a Reply

Sending