Microsoft Defender goes haywire, deletes Start menu icon, Taskbar and more

Woman annoyed at laptop crash
(Image credit: Shutterstock.com / Butsaya)

A recent update to Microsoft Defender has led some Windows users to lose shortcuts to their programs.

The bizarre issue resulted in Windows icons and applications shortcuts being removed from the Taskbar and Start Menu without any warning.

Both Windows 10 and Windows 11 users appear to have been affected, with the antivirus program causing issues for customers across the world.

Microsoft Defender ASR issue

Though apparently just some shortcuts have been affected, and not the actual apps, plenty of users are complaining about the timeliness of the error: Friday 13.

Many of whom have taken to online threads like Reddit and Microsoft’s Tech Community to complain.

One Reddit user explains that the Start menu is also affected: “I can't open firefox by using the windows key and typing the name i have to go to program files”.

Microsoft issued a statement that reads: “Windows Security and Microsoft Defender for Endpoint customers may have experienced a series of false positive detections for the Attack Surface Reduction (ASR) rule "Block Win32 API calls from Office macro" after updating to security intelligence builds between 1.381.2134.0 and 1.381.2163.0.”

The author continues to explain that the error is “primarily impacting Windows shortcut (.lnk) files”, and that users who have not enabled the “Block Win32 API calls from Office macro” rule should not be affected. 

Another user managed to repair the issue, but found that certain icons in the taskbar had become invisible. 

The company has issued a remedial fix to its antivirus, however many businesses are still reporting that they have not been catered well for. Some complain that the fix “doesn't restore Microsoft Office shortcuts which were deployed per-user”, while others have asked for steps to deploy the fix through Intune.

With new comments being added each day, it’s clear that Microsoft needs to do more to fix the ongoing Defender error. TechRadar Pro has asked Microsoft for clarification.

TOPICS
Craig Hale

With several years’ experience freelancing in tech and automotive circles, Craig’s specific interests lie in technology that is designed to better our lives, including AI and ML, productivity aids, and smart fitness. He is also passionate about cars and the decarbonisation of personal transportation. As an avid bargain-hunter, you can be sure that any deal Craig finds is top value!

Read more
A man getting angry with his laptop.
Windows 11 bug deletes Copilot from the OS – is this the first glitch ever some users will be happy to encounter?
Angry businessman destroying his desk and laptop with a baseball bat
New patch for Windows 11 24H2 reportedly plays havoc with File Explorer, and some folks are claiming it's broken their PC
Angry woman using a laptop
Microsoft makes another tweak to Windows 11’s taskbar – but it’s probably not the change you were hoping for
Woman disgusted by her laptop
Embarrassing Windows 11 bug that deleted Copilot app is now fixed – but will anyone outside of Microsoft care?
Copilot imagery from Microsoft
Fed up with Copilot in Windows 11? Microsoft pushing a new keyboard shortcut for the AI isn’t likely to help, and it could mess with your desktop mojo
A laptop with the Windows 11 desktop on screen, glowing, while on a work desk
Are you unable to get security updates for Windows 11 24H2? Here’s the likely reason why, and the fix to get your PC safe and secure again
Latest in Security
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
Data leak
A major Keenetic router data leak could put a million households at risk
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Multiple routers hit by new critical severity remote command injection vulnerability, with no fix in sight
Code Skull
This dangerous new ransomware is hitting Windows, ARM, ESXi systems
An abstract image of a lock against a digital background, denoting cybersecurity.
Critical security flaw in Next.js could spell big trouble for JavaScript users
Latest in News
Open AI
OpenAI unveiled image generation for 4o – here's everything you need to know about the ChatGPT upgrade
Apple WWDC 2025 announced
Apple just announced WWDC 2025 starts on June 9, and we'll all be watching the opening event
Hornet swings their weapon in mid air
Hollow Knight: Silksong gets new Steam metadata changes, convincing everyone and their mother that the game is finally releasing this year
OpenAI logo
OpenAI just launched a free ChatGPT bible that will help you master the AI chatbot and Sora
An aerial view of an Instavolt Superhub for charging electric vehicles
Forget gas stations – EV charging Superhubs are using solar power to solve the most annoying thing about electric motoring
NetSuite EVP Evan Goldberg at SuiteConnect London 2025
"It's our job to deliver constant innovation” - NetSuite head on why it wants to be the operating system for your whole business