Windows Defender stopping me from ejecting harddrive

After uninstalling Norton (as it came preinstalled after on my computer) I started to experience an issue, whenever I would try to eject my hard drive I would get an error, after looking in event viewer I saw an error talking about how msmpeng.exe was stopping it from ejecting. After researching I found out that this task was windows defender.

However I have tried everything to stop this from happening to no avail, Ive gone into its settings to turn it off and yet it still runs in the background still blocking be from ejecting my hard drive, attempting to close msmpeng.exe in task manager gives me an error that I dont have permission (with no way to change this) I have then followed guides about going into edit to make a file called disablelivespywareprotection (something like that) and now Im out of answers, Am I now forced to just unplug it unsafely or something? please help

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

Did you go to Norton and get their removal software which removes all the code or just used Programs and features which does not?
-----------
If this answers your question - Then mark it so. Then others may find it.
---------------
Around computers
since 1952
lacrumb

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I used programs and features

1 person found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

That did not get rid of the code that is causing problems.

Go to Norton and get the removal software.

-----------
If this answers your question - Then mark it so. Then others may find it.
---------------
Around computers
since 1952
lacrumb

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Did that and I still get the error, heres what it says in the log

The application \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MsMpEng.exe with process id 4380 stopped the removal or ejection for the device USB\VID_1058&PID_25FE\575834314131393638334334.

2 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Did that and I still get the error, here's what it says in the log

The application \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MsMpEng.exe with process id 4380 stopped the removal or ejection for the device USB\VID_1058&PID_25FE\575834314131393638334334.

Hi, 

I have exactly the same problem with the same message in 3 different machines after upgrading from windows v 1909 to v 2004. (Build 19041.329). The only way to get out of that situation is by doing a PC restart. 

The same machines did not have this problem with v 1909 and there is no problem either with windows insider development Build 20152.1000 on the same PC's.

No third party security,  just windows defender.

I submitted a report on FBH with the recording, I think you should do that too or add a comment to my feedback.

https://aka.ms/AA8t6v3

See the event message below.

18 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Did that and I still get the error, here's what it says in the log

The application \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MsMpEng.exe with process id 4380 stopped the removal or ejection for the device USB\VID_1058&PID_25FE\575834314131393638334334.

I get the same issue.

The application \Device\HarddiskVolume1\ProgramData\Microsoft\Windows Defender\Platform\4.18.2006.10-0\MsMpEng.exe with process id 4272 stopped the removal or ejection for the device USB\VID_0BC2&PID_AB38\NA9Q7TM3.

and

The application System with process id 4 stopped the removal or ejection for the device USB\VID_0BC2&PID_AB38\NA9Q7TM3.

Very annoying. Please fix it Microsoft.

16 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Did that and I still get the error, here's what it says in the log

The application \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MsMpEng.exe with process id 4380 stopped the removal or ejection for the device USB\VID_1058&PID_25FE\575834314131393638334334.

I get the same issue.

The application \Device\HarddiskVolume1\ProgramData\Microsoft\Windows Defender\Platform\4.18.2006.10-0\MsMpEng.exe with process id 4272 stopped the removal or ejection for the device USB\VID_0BC2&PID_AB38\NA9Q7TM3.

and

The application System with process id 4 stopped the removal or ejection for the device USB\VID_0BC2&PID_AB38\NA9Q7TM3.

Very annoying. Please fix it Microsoft.

"...Very annoying. Please fix it Microsoft..."


[Machine Translation]

Really annoying Microsot !!!!! Or at least post an answer on this Forum !!!!!

12 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I got an answer to this issue.  You do not have to safely remove USB drives anymore. If you look under disk management.  Right clik on the disc label in the  lower section. Select properties. Then select the policies tab. Under that is removal policy. Quick Removal(default) and Better Performance. As long as Quick Removal(default) is selected you can remove the drive anytime you want safely. I would  make sure the drive is not actually churning before pulling the plug. I've had no issues since someone explained this to me on Windows 10 help forums. https://www.tenforums.com/

Hope this helps.

 

9 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I got an answer to this issue.  You do not have to safely remove USB drives anymore. If you look under disk management.  Right clik on the disc label in the  lower section. Select properties. Then select the policies tab. Under that is removal policy. Quick Removal(default) and Better Performance. As long as Quick Removal(default) is selected you can remove the drive anytime you want safely. I would  make sure the drive is not actually churning before pulling the plug. I've had no issues since someone explained this to me on Windows 10 help forums. https://www.tenforums.com/

Hope this helps.

 

Hi,

Useful info - but how do you make sure its 'not churning'.  Where is the 'stop churning' button?  I think mine is churning because of Windows Defender doing something.  When I do manage to safely eject the HD it spins down.  When it refuses to eject it won't spin down, and its churning.  When I pull it out when its spinning like this it makes a funny dying sound that doesn't sound normal.

I hope the UI expert who thought it sensible to have an 'eject device' button which then presents a 'Problem ejecting USB Mass storage device - device is currently in use, close any programs or windows that might be using the device and then try again' dialog box if the correct thing is just to pull the USB lead is 'needs improvement' on their annual review. 

Andy

12 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I got an answer to this issue.  You do not have to safely remove USB drives anymore. If you look under disk management.  Right clik on the disc label in the  lower section. Select properties. Then select the policies tab. Under that is removal policy. Quick Removal(default) and Better Performance. As long as Quick Removal(default) is selected you can remove the drive anytime you want safely. I would  make sure the drive is not actually churning before pulling the plug. I've had no issues since someone explained this to me on Windows 10 help forums. https://www.tenforums.com/

Hope this helps.

 

Hi,

Useful info - but how do you make sure its 'not churning'.  Where is the 'stop churning' button?  I think mine is churning because of Windows Defender doing something.  When I do manage to safely eject the HD it spins down.  When it refuses to eject it won't spin down, and its churning.  When I pull it out when its spinning like this it makes a funny dying sound that doesn't sound normal.

I hope the UI expert who thought it sensible to have an 'eject device' button which then presents a 'Problem ejecting USB Mass storage device - device is currently in use, close any programs or windows that might be using the device and then try again' dialog box if the correct thing is just to pull the USB lead is 'needs improvement' on their annual review. 

Andy

@old-fogey, 

The problem with windows defender is not just for USB devices, the same happens with external SATA drives. This problem started with Windows 10 v 2004 and it is not happening with the same hardware with Version 1909, it is also not happening with insider build 20180 or other development builds.

It definitely looks like a bug caused by windows defender only with builds 19041 or 19042...

When the problem occurs, a restart of the PC seems to cure the problem temporarily and a clean eject is allowed before defender starts using the drive again.

The problem is definitely a bug it only happens with 19041 builds and MS should fix it.

9 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

 
 

Question Info


Last updated April 13, 2021 Views 10,533 Applies to: