Windows Defender update deletes Start Menu, Taskbar, Desktop shortcuts

Getty Photos

A new Windows Defender update has triggered issues for IT admins, deleting Start out Menu, Taskbar, and desktop shortcuts on Windows products.

Just one consumer lifted the issue in a Microsoft neighborhood assistance thread, declaring that soon after the early morning update of security intelligence to version 1.381.2140., Defender seems to be deleting clients’ hyperlinks to programs.

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

The issue seems to stem from an attack floor reduction (ASR) rule designed in the most current Defender update. Customers reported that the trouble is with the precise ASR rule: Block Gain32 API phone calls from Workplace macros. 

Discussions started throughout the late early morning on Friday in an on line group for IT procedure administrators, where by a variety of buyers have noted that apps went missing from their devices. 

“I’ve appeared to have misplaced all Microsoft applications, outlook/excel/phrase,” wrote a person person. “an error concept will come up indicating it can be not supported and then the app seems to have uninstalled.”

Another mentioned: “..appears like that all shortcuts which are situated in ProgramDataMicrosoftWindowsStart MenuPrograms will be deleted right away”.

Broader complaints unveiled all .LNK data files were remaining automatically deleted. Some claimed looking at them all send out to OneDrive’s Recycle Bin.

“We’re investigating an issue where by customers are unable to access software shortcuts on the Start off menu and Taskbar in Windows,” Microsoft said on Twitter. “For more facts and updates, make sure you follow the SI MO497128 in your admin heart.”

Microsoft mentioned it has recognized the precise rule which was “resulting in impact” and has reverted the rule to avoid any further effect whilst it investigates more.

To fix the issue, some consumers advised that altering the “Block Gain32 API calls from Business macro” rule to audit only labored for them. Many others mentioned deleting the ASR rules, specifically 92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b, also remedied the predicament. 

This has triggered a lousy working day. Need to have a resolve for restoring all the deleted icons.

— Jay (@Mandelbrot_19) January 13, 2023

Nevertheless, it remains unclear irrespective of whether right after implementing the fix, no matter if the shortcuts will mechanically return. Some buyers have experienced to manually recreate their shortcuts yet again.

“Has any individual put it in Audit manner and has the .lnk restored back again to there spot. Minimal fearful when MS fixes this, how do person get there .lnks back. Do we will need to tell all people to build them again?” wrote just one user Reddit.

IT Pro has contacted Microsoft for remark.