Antivirus Expired & Real-Time Protection Off? Fix It in 30 Seconds

The 30-Second Fix: Restart the Antivirus Service

I know this error is infuriating – you paid for the subscription, but Windows still says "Real-time protection off" or your antivirus app shows that red banner. Nine times out of ten, the service just got stuck after renewal. You don't need to reinstall anything.

1. Press Windows + R, type services.msc, hit Enter.
2. Scroll to your antivirus service. For Windows Defender, it's Windows Defender Antivirus Service. For third-party: look for Norton, McAfee, Bitdefender, or Kaspersky entries.
3. Right-click that service, choose Restart.
4. Wait 10 seconds. Then check if real-time protection is back on.

This works because subscription expiration often triggers a service pause. Once you renew, the service doesn't always wake up on its own. Restarting it forces the check. If the error persists, move to the moderate fix.

The 5-Minute Fix: Use the Official Repair Tool

If the quick restart didn't do it, the antivirus app's files might be slightly corrupted – common after a subscription renewal that didn't fully process. Every major antivirus has a built-in repair tool. Skip the “uninstall and reinstall” advice you see on forums; that's overkill for this.

For Windows Defender (Windows 10/11)

1. Open Settings > Privacy & Security > Windows Security (or just search for "Windows Security").
2. Click Virus & threat protection.
3. Under "Virus & threat protection settings," click Manage settings.
4. Toggle Real-time protection off, wait 5 seconds, then toggle it back on.
5. If it still won't stay on, run the Windows Security troubleshooter. Open Settings > System > Troubleshoot > Other troubleshooters > find Windows Security and run it.

For Third-Party Antivirus (Norton, McAfee, Bitdefender, etc.)

1. Open the antivirus app. Look for a menu or gear icon labeled Settings or Help & Support.
2. Find Repair or Fix Problems. Some call it “Subscription Refresh” or “Product Repair.”
3. Run the repair. It'll check the license file and re-register the service. Takes 2-3 minutes.
4. Restart your PC after it finishes. Then check real-time protection again.

I've seen this fix work on Norton 360 (version 2023 and later) and Bitdefender Total Security 2024. The repair tool is specific to each brand – don't click anything else in the menu unless you're sure.

The 15+ Minute Fix: Force a Full License Refresh

If the first two fixes didn't work, the subscription data on your machine is likely stale. Your antivirus thinks it's expired even though the cloud says it's active. This happens more often than you'd think – I dealt with this exact case on a Dell laptop running Windows 11 23H2 with McAfee LiveSafe last month.

Step 1: Clear the Local License Cache

1. Close your antivirus app completely. Right-click its icon in the system tray and choose Exit or Close.
2. Open File Explorer and navigate to C:\ProgramData\[AntivirusName]\License (or C:\Users\[YourUsername]\AppData\Local\[AntivirusName]\License). Replace [AntivirusName] with the actual folder name – for Defender it's Microsoft\Windows Defender.
3. Delete the license files. Don't worry – they'll be recreated when the app contacts the activation server again. For Defender, you can delete the entire Quarantine folder too, but skip that if you're unsure.
4. Restart your PC. The antivirus will detect the missing license and fetch a fresh one from the servers.

Step 2: Run the Antivirus in Safe Mode

Sometimes a stubborn service won't reset in normal mode because of conflicting processes. Booting into Safe Mode with Networking isolates the problem.

1. Press Windows + I to open Settings.
2. Go to System > Recovery, and under Advanced startup click Restart now.
3. After your PC restarts, choose Troubleshoot > Advanced options > Startup Settings > Restart.
4. Press 5 or F5 for Safe Mode with Networking.
5. Once in Safe Mode, open your antivirus app (if it launches). Go to Settings > Subscription and click Refresh License or Check for Updates.
6. Restart the PC normally. Check if real-time protection is back.

Step 3: Uninstall and Reinstall (Only as Last Resort)

If nothing else worked, you need a clean reinstall. But use the official removal tool from the antivirus vendor – not the Windows Add/Remove Programs. Norton, McAfee, and Kaspersky all have dedicated removal tools (Norton Removal Tool, MCPR for McAfee, Kavremover for Kaspersky).

1. Download the removal tool from the vendor's support site.
2. Run it in Safe Mode (follow step 2 above).
3. After removal, restart normally and reinstall the latest version from the vendor's website.
4. Sign in with your account, and real-time protection should activate within a minute.

Pro tip: Before you reinstall, check your subscription status on the vendor's website. If it shows expired there too, call your credit card company – sometimes auto-renewal fails silently. I've seen cases where the bank blocked the payment, the vendor didn't notify you, and your antivirus went dead.

Once real-time protection is back, run a full scan to make sure nothing slipped through while it was off. If the scan finds threats, quarantine them – then you're safe.

This tripped me up the first time too, but now you know the fix. Start with the 30-second restart. Most people stop there. If not, the 5-minute repair almost always works. The 15-minute license refresh is for the stubborn cases. You've got this.