While shutting down my Windows 10 22H2 PC, Microsoft Defender flagged wuapi.dll, a legitimate Windows Update system file, and removed it. Windows Update stopped working afterward. I copied the file from a known-clean computer, but Defender deleted that copy too. Scans on another system and VirusTotal found no malware, so this appears to be a false positive.
I temporarily disabled Defender and restored the file to System32 so I could add an exclusion, but Windows Update still would not work. I suspect the original incident may also have damaged related registry entries or other system components. This happened once before, in September, when Defender falsely flagged another Windows file and caused additional problems with Explorer. Running System File Checker several times did not repair the issue.
I need to keep using Windows because of proprietary work software, and I currently do not have another drive large enough to back up my personal files before reinstalling. Is there any way to repair Windows Update and restore the missing system components without performing a clean installation?
4 Answers
If this keeps happening, consider whether another security product, a damaged Defender definition update, or a corrupted Windows component store is involved. Before reinstalling, try backing up your files in smaller batches or using a temporary external drive. An in-place Windows repair can preserve personal files and applications, while a clean install should be the last resort.
Try Microsoft's system repair tools, especially DISM followed by System File Checker. DISM can download clean component files, and then SFC may be able to restore wuapi.dll and repair the protected system files. Restart afterward and check Windows Update again. Since SFC reportedly did not help after several runs, a repair install may be the next non-destructive option.
Switching operating systems could avoid Windows Defender and forced-update issues, but that is not practical for everyone. If your work depends on proprietary Windows software and compatibility layers do not run it correctly, repairing Windows is the more realistic solution here.
The important details are that this was Windows 10 22H2 with Extended Security Updates, and Defender identified wuapi.dll. Restoring a copy to System32 alone may not fix the problem if Defender also quarantined related components or if the Windows Update servicing store is damaged. Check Defender's protection history and quarantine records, then use an in-place repair installation if you can create a backup first.
I placed the file in System32 because that is its normal location. The same file was clean when checked on another computer and with an independent malware scanner.
I ran the file repair checks three times and they did not change anything. At this point, I may have to do a clean installation.