Unending trouble updating Windows Defender on x64/Win8.1

  • Thread starter Thread starter syckofviruses
  • Start date Start date
S

syckofviruses

Windows Defender update just fails, and WIndows defender never starts.


I have tried:

resetting everything (%temp%, %windir%\temp and SoftwardDistribution). No luck - fails (8007002)

Doing same logged in as administrator - same results

Running the update from an administrative command prompt - nothing happens

Running some exe (there was information in a related thread that I replied to, but it seems to have been purged) which says, "Sorry, no can do as the service isn't running". Some exe that took a -resetdefinition flag, unfortunately lost the info.


Most frustrating. This is all WIndows Defender and WIndows update stepping on each other, i.e,, I haven't done anything on this machine that I would expect impact this -> no running of registry cleaners directly.


FWIW Visual Studio 2010 SP1 is also failing to to install, not that I care much and I just want to get Defender going again.


Here is the mpsigstub.exe log showing my last 2 (of many) attempts to update windows defender via windows update:


----------------------------------------------------------------------------------
Command: MpSigStub.exe /program "C:\Windows\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q
Start time: 6/21/2014 12:58 PM (version 11.1.4590.0)

=================================== ProductSearch ==================================

Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0

================================ PackageDiscovery ================================

Package files discovered:
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM (1.177.0.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM (1.177.428.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM (1.177.0.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM (1.177.428.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM (111.0.0.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll (1.1.10701.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL (2.1.10502.0)

AM FE: NIS Full:
Engine: 1.1.10701.0 NIS engine: 2.1.10502.0
AS base VDM: 1.177.0.0 NIS base VDM: 111.0.0.0
AV base VDM: 1.177.0.0 NIS full VDM: 111.25.0.0
AS delta VDM: 1.177.428.0
AV delta VDM: 1.177.428.0

================================ PatchApplication ================================

Patched nisfull.vdm to 111.25.0.0

================================= MpUpdateEngine =================================

Package files for the engine update:
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM (1.177.0.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM (1.177.428.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM (1.177.0.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM (1.177.428.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM (111.0.0.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\nisfull.vdm (111.25.0.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll (1.1.10701.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL (2.1.10502.0)

ERROR 0x800106ba : MpUpdateEngine(C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs)

================================== XcopyDeployment =================================

Using Xcopy location: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates

================================== XcopyForProduct =================================

Copied mpengine.dll
Copied mpasbase.vdm
Copied mpavbase.vdm
Copied mpasdlta.vdm
Copied mpavdlta.vdm
Copied gapaengine.dll
Copied nisbase.vdm
Copied nisfull.vdm

================================== ServiceStart ==================================

ERROR 0x80070005 : OpenServiceW
ERROR 0x80070005 : XcopyDeployment
ERROR 0x80070005 : IProduct->UpdateEngine

================================= ValidateUpdate =================================

mpengine.dll version in package is 1.1.10701.0, but after update machine has older version 1.1.10600.0
mpasbase.vdm version in package is 1.177.0.0, but after update machine has older version 1.175.0.0
mpavbase.vdm version in package is 1.177.0.0, but after update machine has older version 1.175.0.0
mpasdlta.vdm version in package is 1.177.428.0, but after update machine has older version 1.175.417.0
mpavdlta.vdm version in package is 1.177.428.0, but after update machine has older version 1.175.417.0

Watson Report: Position:
HRESULT: 0x80070005 P1
FailedFunction: MpUpdateEngine P2
Operation: AM FE P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.5.218.0 P6
ProductName: Windows Defender P7


================================= ValidateUpdate =================================

nisfull.vdm version in package is 111.25.0.0, but after update machine has older version 111.19.0.0

Watson Report: Position:
HRESULT: 0x80070005 P1
FailedFunction: MpUpdateEngine P2
Operation: NIS Full P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.5.218.0 P6
ProductName: Windows Defender P7

ERROR 0x80070005 : One or more of the packages found failed to update for Windows Defender.
ERROR 0x80070005 : One or more of the products found failed to update; returning this error
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\nisfull.vdm
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL
ERROR 0x80070005 : MpSigStubMain
End time: 6/21/2014 12:58 PM
----------------------------------------------------------------------------------

----------------------------------------------------------------------------------
Command: MpSigStub.exe /program "C:\Windows\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q
Start time: 6/21/2014 1:12 PM (version 11.1.4590.0)

=================================== ProductSearch ==================================

Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0

================================ PackageDiscovery ================================

Package files discovered:
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM (1.177.0.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM (1.177.428.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM (1.177.0.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM (1.177.428.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM (111.0.0.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll (1.1.10701.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL (2.1.10502.0)

AM FE: NIS Full:
Engine: 1.1.10701.0 NIS engine: 2.1.10502.0
AS base VDM: 1.177.0.0 NIS base VDM: 111.0.0.0
AV base VDM: 1.177.0.0 NIS full VDM: 111.25.0.0
AS delta VDM: 1.177.428.0
AV delta VDM: 1.177.428.0

================================ PatchApplication ================================

Patched nisfull.vdm to 111.25.0.0

================================= MpUpdateEngine =================================

Package files for the engine update:
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM (1.177.0.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM (1.177.428.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM (1.177.0.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM (1.177.428.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM (111.0.0.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\nisfull.vdm (111.25.0.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll (1.1.10701.0)
C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL (2.1.10502.0)

ERROR 0x800106ba : MpUpdateEngine(C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs)

================================== XcopyDeployment =================================

Using Xcopy location: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates

================================== XcopyForProduct =================================

Copied mpengine.dll
Copied mpasbase.vdm
Copied mpavbase.vdm
Copied mpasdlta.vdm
Copied mpavdlta.vdm
Copied gapaengine.dll
Copied nisbase.vdm
Copied nisfull.vdm

================================== ServiceStart ==================================

ERROR 0x80070005 : OpenServiceW
ERROR 0x80070005 : XcopyDeployment
ERROR 0x80070005 : IProduct->UpdateEngine

================================= ValidateUpdate =================================

mpengine.dll version in package is 1.1.10701.0, but after update machine has older version 1.1.10600.0
mpasbase.vdm version in package is 1.177.0.0, but after update machine has older version 1.175.0.0
mpavbase.vdm version in package is 1.177.0.0, but after update machine has older version 1.175.0.0
mpasdlta.vdm version in package is 1.177.428.0, but after update machine has older version 1.175.417.0
mpavdlta.vdm version in package is 1.177.428.0, but after update machine has older version 1.175.417.0

Watson Report: Position:
HRESULT: 0x80070005 P1
FailedFunction: MpUpdateEngine P2
Operation: AM FE P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.5.218.0 P6
ProductName: Windows Defender P7


================================= ValidateUpdate =================================

nisfull.vdm version in package is 111.25.0.0, but after update machine has older version 111.19.0.0

Watson Report: Position:
HRESULT: 0x80070005 P1
FailedFunction: MpUpdateEngine P2
Operation: NIS Full P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.5.218.0 P6
ProductName: Windows Defender P7

ERROR 0x80070005 : One or more of the packages found failed to update for Windows Defender.
ERROR 0x80070005 : One or more of the products found failed to update; returning this error
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\nisfull.vdm
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll
Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL
ERROR 0x80070005 : MpSigStubMain
End time: 6/21/2014 1:12 PM
----------------------------------------------------------------------------------

----------------------------------------------------------------------------------
Command: MpSigStub.exe /program mpas-feX64.exe
Start time: 6/21/2014 6:13 PM (version 11.1.4590.0)

================================= CacheMpSigStub =================================

Copied MpSigStub.exe to C:\Windows\system32\MpSigStub.exe

=================================== ProductSearch ==================================

Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0

================================ PackageDiscovery ================================

Package files discovered:
g:\f35bc339c879d07ec88e6dd8\mpasbase.vdm (1.175.0.0)
g:\f35bc339c879d07ec88e6dd8\mpasdlta.vdm (1.175.2365.0)
g:\f35bc339c879d07ec88e6dd8\mpengine.dll (1.1.10600.0)

AS FE:
Engine: 1.1.10600.0
AS base VDM: 1.175.0.0
AV base VDM: Not included
AS delta VDM: 1.175.2365.0
AV delta VDM: Not included

=============================== PackagesNotApplicable ==============================

No products found to update.
ERROR 0x80070490 : SearchForApplicableProducts
Deleted g:\f35bc339c879d07ec88e6dd8\mpasbase.vdm
Deleted g:\f35bc339c879d07ec88e6dd8\mpasdlta.vdm
Deleted g:\f35bc339c879d07ec88e6dd8\mpengine.dll

Watson Report: Position:
HRESULT: 0x80070490 P1
FailedFunction: PackagesNotApplicable P2
Operation: (null) P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: (null) P6
ProductName: (null) P7

ERROR 0x80070490 : MpSigStubMain
End time: 6/21/2014 6:13 PM
----------------------------------------------------------------------------------

Continue reading...
 
Back
Top