Datto Windows Agent: Screenshots fail with error status 0xc000007b, referencing "wdFilter.sys"
Issue
Datto Windows Agent Screenshots fail with a 0xc000007b error that references "wdFilter.sys" on Windows Server 2016 and later.
Environment
- Datto Windows Agent
- Microsoft Windows 2016 and later
Cause
Failed update attempts of Microsoft Windows Defender.
Resolution
This problem is the result of a known Microsoft issue with Windows Defender updates. You can verify this issue by checking the Application Event Log (external link) on the protected machine. Look for events regarding failed updates for Windows Defender.
You can resolve the issue by repairing the Windows Defender installation using Microsoft's recommended solution(external link). After this correction attempt a differential merge as the next backup.
If the Windows Defender installation is confirmed to be repaired and the issue persists on screenshots of the backup point created with the differential merge, attempt a full backup of the C volume. This can be done in the Volume Level Backup Control.