Recommended Free Tools
Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
The Windows Defender message written as 0X080070422 usually refers to Microsoft’s standard error 0x80070422. Microsoft defines that code as indicating that the Windows Update service is disabled or stopped. It is a service or configuration signal, not proof of malware, damaged hardware, or a broken Defender installation.
Identify where the message appears first: Windows Update, a Defender security-intelligence update, a scan, or Microsoft Store/account sign-in. Then repair only the service or provider involved. Start with the Windows Update service, because Defender’s protection updates depend on Windows update components.
As an Amazon Associate I earn from qualifying purchases.
What does the 0X080070422 Windows Defender error mean?
0X080070422 is a malformed or extended spelling seen in searches and a Microsoft Q&A report. The canonical Windows code is 0x80070422. Microsoft’s Windows Update table states: 0x80070422 | Windows Update service is disabled or stopped.
The same code can be displayed by different Microsoft components. A failed Windows Update service, a Defender security-intelligence update, and a Microsoft account or Store sign-in can all produce related messages. A scan can also fail after the service problem has been corrected, but that is a separate stage.
Popular on Amazon
- Spacious Design: Measuring 21.1" wide and 14.1" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy ergonomic support with the integrated cushioned wrist rest.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a sleek black carbon color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.8 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
- The code alone does not establish that your computer is infected.
- It does not prove a hardware failure or a permanently damaged Defender installation.
- Changing unrelated services or downloading a random “repair” executable can create new problems.
- The correct fix depends on the screen, wording, and action that produced the message.
Before changing anything
Save open documents and close applications before restarting Windows or launching an Offline scan. You need permission to open Services and an elevated Command Prompt; on a work or school computer, those actions may be restricted by policy. Write down the exact message, the app that displayed it, and whether it appeared while checking for updates, updating protection, scanning, or signing in. That context is more useful than the number alone.
Windows 10 and Windows 11 both include Microsoft Defender Antivirus. The built-in tools described here are therefore the first-line option and do not require a USB device, a physical product, or a paid “PC repair kit.” Keep Windows connected to the internet when checking for updates so that fresh update metadata and security intelligence can be downloaded.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Where does 0x80070422 appear, and which remedy fits?
Use the location of the message to select the least disruptive remedy. Do not apply the Store sign-in service change to a Windows Update failure, or disable a second antivirus simply because a scan has failed.
| Where the message appears | Likely component | First action | Disruption |
|---|---|---|---|
| Settings > Windows Update | Windows Update service | Set the service to Automatic, start it, restart Windows, and check again | Low; uses built-in Services and Settings |
| Windows Security > Virus & threat protection during a protection update | Windows Update or the active antivirus provider | Check Manage providers, then repair Windows Update and retry | Low unless another antivirus must be reconfigured |
| Windows Security while starting a scan | Scan configuration or a remaining service issue | Confirm real-time protection and try Quick, Full, Custom, or Offline scan | Low to moderate; Offline scan restarts the PC |
| Microsoft Store or Microsoft-account sign-in | Microsoft Account Sign-in Assistant in a context-specific case | Check that service and set it to Manual only when the sign-in context matches | Low, but not a general Windows Update fix |
How do I fix 0x80070422 in Windows Update?
Repair the Windows Update service first. These steps apply when Settings, Windows Update, or another update screen reports the code.
- Press
Win + R, typeservices.msc, and press Enter to open the Services console. - Scroll to Windows Update, double-click it, and open its Properties.
- Set Startup type to Automatic. If the service status is Stopped, select Start.
- Select Apply, then OK. Close Services.
- Restart Windows. After signing in, open Settings > Windows Update and select Check for updates.
If the service starts and the update completes, no registry edit, Defender reinstall, or third-party utility is needed. Leave other services unchanged. The change affects the service’s launch behavior; it does not delete personal files or installed applications.
What if Windows Update is already running?
A running service can still have a damaged or inconsistent download cache. Use Microsoft’s Windows Update troubleshooter first if it is available in your edition of Windows. If the error remains, reset the update caches from an elevated Command Prompt. Cache reset is a later step, not a universal Defender cure.
Free tools Windows power users keep installed
One-click scans. No signup required.
Also popular on Amazon
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
- Open Start, type
Command Prompt, right-click it, and choose Run as administrator. - Stop the services that hold update files:
net stop wuauserv
net stop bits
net stop cryptsvc- Rename the two cache folders so Windows can build fresh copies:
ren C:WindowsSoftwareDistribution SoftwareDistribution.old
ren C:WindowsSystem32catroot2 catroot2.oldIf a rename reports that a file is in use, confirm that the related service stopped and close any Windows Update window before trying again. Do not delete the folders while a service is using them. Renaming preserves the old directory as a fallback while Windows creates a new cache.
- Start the services again:
net start cryptsvc
net start bits
net start wuauserv- Restart Windows, return to Settings > Windows Update, and select Check for updates.
Windows recreates the cache directories as needed. The first check can take longer because update metadata and packages must be downloaded again. If the troubleshooter reports a different component, follow that component’s result rather than repeatedly resetting folders.
How can I tell whether the service change worked?
In Services, Windows Update should show Running after you start it, and its startup type should remain Automatic. In Settings, the update check should progress beyond the immediate error and display either available updates or a statement that the device is up to date. If the setting changes back to Disabled after a restart, the computer may be managed by an organization or another security policy; contact the administrator instead of forcing unrelated services to start.
How do I fix a Defender security-intelligence update that shows 0x80070422?
When the message appears under Defender’s protection updates, first verify which antivirus provider currently owns real-time protection. Microsoft lists 0x80070422 among Defender security-intelligence update errors. “Security intelligence” is the current wording for the malware-definition data Defender uses, so an intelligence-update failure is different from a scan-result detection.
- Open Windows Security > Virus & threat protection and inspect the protection-update status.
- Open Virus & threat protection > Manage providers. The wording can vary by Windows release.
- Check whether a non-Microsoft antivirus is listed as the active provider. When another product registers through the Windows Security Center API, Microsoft Defender Antivirus enters disabled mode automatically, and Defender updates cannot run while it is disabled.
- Do not run two real-time antivirus products at the same time. If you need Microsoft Defender active, use the other product’s documented uninstall or real-time-protection setting rather than deleting files or services manually.
- Repair the Windows Update service using the steps above, restart Windows, and return to Windows Security > Virus & threat protection to retry the protection-intelligence update.
If the normal update path still fails, use Microsoft’s official Defender security-intelligence update channel. Select the package that matches your Windows architecture and follow Microsoft’s instructions. Avoid executable files offered by download sites or forum posts; an update package should come from an official Microsoft channel.
Why does another antivirus affect Defender updates?
Windows Security coordinates registered security providers so that two products do not compete for real-time file and process monitoring. A non-Microsoft antivirus can therefore leave Defender visible in the interface while its antivirus engine is disabled. That behavior is different from a missing Defender installation and is why the provider check comes before reinstalling anything. Removing or disabling a security product can lower protection temporarily, so have the replacement protection ready and follow that vendor’s documented procedure.
Also popular on Amazon
- Note: Not suitable for MacBooks released after 2023 or devices with a protruding front camera; Not applicable to full-screen or notch-style tempered glass screen protectors; Do not use on the rear camera of the phone.
- 💻 Why Do You Need a Webcam Cover Slide? — Safeguard your privacy by covering your webcam with our reliable webcam cover when not in use. Don't let anyone secretly watch you. Stay protected!
- ✅ Thin & Stylish — Enhance your laptop's functionality and aesthetics with our 0.027" ultra-thin webcam covers. Seamlessly close your laptop while adding a touch of sophistication.
- ✅ Fits Most Devices — Compatible with laptops, phones, tablets, desktops! Keep your privacy intact on Ap/ple, Mac/Book, iPh/one, iP/ad, H/P, L/novo, De/ll, Ac/er, As/us, Sa/msung devices.
- ✅ 365 Days Protection — Our upgraded 3.0 adhesive ensures a strong hold that won't damage your equipment. Experience reliable, long-term privacy protection day in and day out.
What should I do if a Defender scan fails after the service is repaired?
Once updates work, test scanning separately. Windows Security includes Quick, Full, and Custom scans, and Microsoft Defender Antivirus also provides an Offline scan that runs before normal Windows processes load.
Try the built-in scan modes
- Open Windows Security > Virus & threat protection.
- Select Quick scan for a short check of common locations.
- Open Scan options and choose Full scan for all accessible files, or Custom scan to select a drive or folder.
- For a scan that should run outside the normal desktop session, choose Microsoft Defender Antivirus (offline scan) and select Scan now. Save work first; Windows restarts into the Windows Recovery Environment and scans before ordinary Windows processes load.
An Offline scan is more disruptive because it restarts the computer, but it can examine files before a normal Windows process has started. It is a scan option, not a replacement for repairing a disabled update service. Keep the device connected when possible so protection definitions are current before starting any scan.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsScan one file or folder from File Explorer
- In File Explorer, right-click the file or folder.
- Select Show more options if the compact context menu is displayed.
- Select Scan with Microsoft Defender.
If that command is missing, check the active provider under Virus & threat protection > Manage providers. A different registered antivirus may own the context-menu scan action.
Confirm real-time protection
Open Virus & threat protection, select Manage settings, and check Real-time protection. Microsoft documents turning this setting on there. If it is controlled by another provider or by an organization, the switch may be unavailable; do not bypass that control by changing random registry values.
How do I handle 0X080070422 during Microsoft Store or account sign-in?
A Microsoft Q&A report uses the longer 0x080070422 form in a Microsoft-services and Windows sign-in case. A related Store sign-in discussion checks the Microsoft Account Sign-in Assistant. This is a context-specific community troubleshooting lead, not Microsoft’s general definition of the code.
- Confirm that the error appears while signing in to Microsoft Store or a Microsoft account, rather than while checking Windows Update or updating Defender.
- Press
Win + R, enterservices.msc, and open the Services console. - Find Microsoft Account Sign-in Assistant and open its Properties.
- For this sign-in scenario only, set Startup type to Manual. Apply the change and retry the Store or account sign-in.
Do not change this service merely because Windows Update reports 0x80070422; the official Windows Update interpretation remains a disabled or stopped Windows Update service. If the sign-in problem continues, record the exact app and account action that produced it before changing another service. Do not apply this suggestion to a Defender scan or security-intelligence update.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Also popular on Amazon
- Anti-Slip Surface - Transform your laptop into a mobile workstation with the AboveTEK portable laptop lap desk. The anti-slip surface provides a strong grip for laptops up to 15.6 inches(Diagonal), while the double rubber strip on the bottom ensures a stable display or typing experience on your lap, couch, or bed.
- Retractable Mouse Pad - Retractable laptop mouse pad extends on both directions for the left/right handed with elevation along the edges for stopping mouse from falling off. The size of laptop tray is 14" X 9.7" and the size of mouse pad is 7.4" X 6.1".
- Effective Heat Shield - The effective heat shield made of sturdy and thick material protects your laptop from overheating. Prioritizes your comfort and safety, an ideal lap pad or board for working anywhere.
- EASY to Carry and Store - With an ergonomic and simplistic design, the lap desk is portable to store in a backpack. Only 15" in size, 2.2 lb of weight and with slim 0.6 inch thickness, it is ready to be easily carried around.
- Widely Applicable - The smooth platform accommodates laptops and tablets up to 15.6 inches(Diagonal), making it a versatile accessory and one of the best gifts for mom, dad, students and professionals. Perfect for use as a laptop bed tray or tablet holder anywhere at home, library, or park.
Which troubleshooting order is safest?
Use this decision sequence to avoid applying a fix to the wrong component.
- Read the screen. Note whether the error is in Windows Update, a Defender update, a scan, or Store/account sign-in.
- Check Services only for the matching component. Windows Update is the first check for update-related messages; Microsoft Account Sign-in Assistant applies only to the sign-in context described above.
- Restart and retry. A service-start change does not take effect reliably until Windows has been restarted and the original action is attempted again.
- Reset caches only after the basic service check. Renaming SoftwareDistribution and catroot2 is a later Windows Update step, not a universal Defender cure.
- Check the active antivirus provider. A non-Microsoft real-time antivirus can intentionally disable Defender’s engine and updates.
- Use Offline scan only when a scan still fails. It restarts into the recovery environment, so save documents and close applications first.
Common mistakes to avoid
- Using the malformed spelling as proof that a special Defender version is installed. The standard code is
0x80070422. - Changing every service in Services because one service was disabled. Only modify the component identified by the screen.
- Running two real-time antivirus engines together. Windows may disable Defender automatically, and the products can conflict.
- Deleting cache folders while update services are running. Stop the specified services first and rename rather than deleting.
- Assuming a failed scan means an infection. A scan can fail because of a service, provider, or configuration problem.
- Downloading a registry file, DLL, USB “repair” tool, or unverified executable. Microsoft’s built-in tools and official update channels are the documented path.
When should you stop troubleshooting manually?
- The device is controlled by a work or school administrator and service settings revert automatically.
- Windows cannot start several core services, not just Windows Update.
- System files are damaged, the PC repeatedly restarts, or the error is accompanied by unrelated hardware failures.
- You cannot identify which screen generated the code; capture the full message before making changes.
In those cases, use the organization’s support process or Microsoft’s official support and update channels. Keep the original error text, Windows edition, and the action that triggered it; those details determine which branch applies.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Does fixing this error cost anything?
The documented sequence uses Services, Settings, Windows Security, the Windows Update troubleshooter, and Microsoft’s own update channels. Those steps do not require buying hardware or subscribing to a repair service. A third-party utility is optional and should be considered only after the Microsoft steps, not as a prerequisite for activating Defender.
As an optional shortcut after the manual steps, Outbyte PC Repair can address some common Windows component, redirect, shared-DLL, cache, and crash issues where possible, while also offering settings tweaks and diagnostic features. It complements antivirus rather than replacing it; results vary and no utility repairs every crash. It runs on Windows 11, 10, 8, and 7, with a category-based free trial of at least two days before a paid subscription.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Frequently Asked Questions
Can changing Windows Update to Automatic remove my personal files?
No. Changing the service startup type and rebuilding its download caches does not target documents, photos, or installed games. The cache folders hold update data, and Windows recreates them when needed.
Should I download a registry file or DLL to fix 0x80070422?
Avoid generic registry files and DLL downloads. The documented first-line remedies use Services, Windows Settings, Windows Security, and Microsoft update channels; an untrusted replacement file can introduce a different failure.
Is 0X080070422 a different error from 0x80070422?
Usually it is a malformed or extended way of writing the same code. Microsoft’s documented spelling is 0x80070422, which means the Windows Update service is disabled or stopped.
Also popular on Amazon
- Spacious Design: Measuring 21.1" wide and 12" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy laptop support with the integrated device ledge.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a blush pink color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.14 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
Does this code prove that my computer has malware?
No. The code is a service or configuration signal. Update the protection intelligence, verify the active provider, and run an appropriate scan; do not treat the number alone as a malware diagnosis.
What if Windows Update says the service is running but the error remains?
Run the Windows Update troubleshooter, then use the elevated Command Prompt cache-reset sequence: stop wuauserv, bits, and cryptsvc; rename SoftwareDistribution and catroot2; start the services; restart; and check again.
Can I leave a non-Microsoft antivirus installed?
Yes, but Windows Security may register it as the active provider and place Microsoft Defender Antivirus in disabled mode. Do not run two real-time antivirus products together. Follow the other vendor’s documented settings if you want Defender to become active.
Does Microsoft Defender Offline scan need an internet connection?
The Offline scan runs after a restart in the Windows Recovery Environment, so the scan itself is not a normal desktop session. Keep the device connected when possible so protection definitions are current, but save work before selecting the scan because Windows restarts.
Why does the error return after every reboot on a work computer?
An organization can enforce service and security-provider settings through device management. If Windows Update or Defender settings revert, note the time and exact message and ask your administrator to check the policy instead of repeatedly overriding it.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchShould I set Microsoft Account Sign-in Assistant to Manual for every 0x80070422 error?
No. That is a context-specific community troubleshooting lead for Microsoft Store or account sign-in. For Windows Update or Defender-update errors, check the Windows Update service instead.
Do I need to buy a USB, antivirus package, or repair kit?
No. Microsoft’s documented fixes use built-in Windows tools and official update channels. Avoid physical-product recommendations and unverified executables unless a qualified technician has a separate, specific reason.
The Bottom Line
The canonical code is 0x80070422, usually meaning that Windows Update is disabled or stopped. Identify the screen first, set Windows Update to Automatic and restart it for update-related errors, check the active antivirus provider for Defender-update failures, and use built-in scan modes—including Offline scan—only when scanning itself still fails. Reserve the Microsoft Account Sign-in Assistant change for the matching Store or account sign-in case, and avoid unrelated service edits or untrusted repair downloads.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
