Views:

Root Cause

  • Windows Defender cannot recognize the WFBS-SVC agent as AV defender properly so it tries to lock a file when the WFBS-SVC agent wants to open and scan it which will cause the interop issue. At this time, it is determined that this issue may be related to Windows patch KB4535996.
  • tmxpflt had interop with Windows Defender from the memory dump.

Workaround

While some users have experienced problems trying to uninstall KB4535996, these are the steps that you need to follow:

  1. In Windows Desktop Search, type update history then click View your Update history.
  2. Select Uninstall Updates.
  3. On the Installed Updates dialog window, find and select KB4535996, click Uninstall.
  4. Restart.

You can also download Windows Update troubleshooter, which will enable you to block KB4535996 proactively / stop it from reinstalling.

  1. Turn off the machine.
  2. Turn on the machine and enter in safe mode.
  3. Open the command with admin permission.

  4. Enter the following commands:

    • "sc config WdFilter start=disabled"
    • "sc stop WdFilter"
  5. Reboot the machine.

  1. Tap on the Windows-key to open the Start Menu.
  2. Type regedit.exe and hit Enter.
  3. Confirm the UAC prompt to continue.

  4. Navigate to the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender

  5. If you see the preference DisableAntiSpyware on the right, double-click on it and set it to "1" to disable Windows Defender.
  6. If the preference does not exist, right-click on Windows Defender and select New > Dword (32-bit) Value, and name it DisableAntiSpyware. Once "DisableAntiSpyware" is created, double-click and make sure the value is set to "1".
  7. Restart the PC.
Keywords: root cause, workaround,machine is unresponsive,freezing,worry-free Services,trend micro,wfbs-svc,interop issue,Windows update,MS Windows 10 KB4535996 Update,KB4535996,tmxpflt,interop,Windows Defender