Windows Defender service crashing

Question

Hi,

I have noticed that the windows defender service seems to be crashing on machines running Windows 10 1909 since around april....

Seems to coincide with the updates.

Does anyone have a fix or is this a known issue?

Errors:

The Windows Defender Antivirus Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 100 milliseconds: Run the configured recovery program.

Faulting application name: MsMpEng.exe, version: 4.18.1911.3, time stamp: 0x2c9b5e9d
Faulting module name: mprtp.dll, version: 4.18.1911.3, time stamp: 0xf2142587

Answer 1

Same issue here. Windows Defender keepts shuting itself down on Windows Server 2016. Manual restart of the application is required. Very problematic.

Name der fehlerhaften Anwendung: MsMpEng.exe, Version: 4.18.1911.3, Zeitstempel: 0x2c9b5e9d
Name des fehlerhaften Moduls: mprtp.dll, Version: 4.18.1911.3, Zeitstempel: 0xf2142587
Ausnahmecode: 0xc0000409
Fehleroffset: 0x00000000000842ed
ID des fehlerhaften Prozesses: 0xacc
Startzeit der fehlerhaften Anwendung: 0x01d7a3dd8ccd898f
Pfad der fehlerhaften Anwendung: C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe
Pfad des fehlerhaften Moduls: C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\mprtp.dll
Berichtskennung: bb330788-db09-403a-abca-72b43789f893
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Answer 2

Same problem on newer version of Defender.
Last week its going crazy and crashing sometimes even many times per day
This is happening on servers

Faulting application name: MsMpEng.exe, version: 4.18.2001.7, time stamp: 0x5a75917d
Faulting module name: mprtp.dll, version: 4.18.2001.7, time stamp: 0x3a014281
Exception code: 0xc0000409
Fault offset: 0x000000000008934d
Faulting process id: 0x2ad4
Faulting application start time: 0x01d7ae672a335e43
Faulting application path: C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.7-0\MsMpEng.exe
Faulting module path: C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.7-0\mprtp.dll
Report Id: efce22cb-c7c4-46db-a86c-b7710325f062
Faulting package full name:
Faulting package-relative application ID:

Answer 3

I ended up just forcing a platform update for defender, which fixed it. Have since upgraded from 1909, and don't think its a problem on this image!!

Answer 4

The problem keeps appearing on Windows Server 2016 (which does not have a platform upgrade available).

As a hotfix, I am running a Windows Task every 5 minutes that checks whether Defender is running and restarts it if required.
Task looks like this:

Program/Script: powershell.exe
Arguments: -command "if((Get-MpComputerStatus | select -expandproperty RealTimeProtectionEnabled) -eq $false) {set-MpPreference -DisableRealtimeMonitoring $false}"