Jump to content

Unending trouble updating Windows Defender on x64/Win8.1


Recommended Posts

Guest syckofviruses
Posted

Windows Defender update just fails, and WIndows defender never starts.

 

 

I have tried:

 

resetting everything (%temp%, %windir%\temp and SoftwardDistribution). No luck - fails (8007002)

 

Doing same logged in as administrator - same results

 

Running the update from an administrative command prompt - nothing happens

 

Running some exe (there was information in a related thread that I replied to, but it seems to have been purged) which says, "Sorry, no can do as the service isn't running". Some exe that took a -resetdefinition flag, unfortunately lost the info.

 

 

Most frustrating. This is all WIndows Defender and WIndows update stepping on each other, i.e,, I haven't done anything on this machine that I would expect impact this -> no running of registry cleaners directly.

 

 

FWIW Visual Studio 2010 SP1 is also failing to to install, not that I care much and I just want to get Defender going again.

 

 

Here is the mpsigstub.exe log showing my last 2 (of many) attempts to update windows defender via windows update:

 

 

----------------------------------------------------------------------------------

Command: MpSigStub.exe /program "C:\Windows\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q

Start time: 6/21/2014 12:58 PM (version 11.1.4590.0)

 

=================================== ProductSearch ==================================

 

Windows Defender:

Status: Active

Product: 4.5.218.0

Engine: 1.1.10600.0

Signatures: 1.175.417.0

NIS Engine: 2.1.10502.0

NIS Signatures: 111.19.0.0

 

================================ PackageDiscovery ================================

 

Package files discovered:

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM (1.177.0.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM (1.177.428.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM (1.177.0.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM (1.177.428.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM (111.0.0.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll (1.1.10701.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL (2.1.10502.0)

 

AM FE: NIS Full:

Engine: 1.1.10701.0 NIS engine: 2.1.10502.0

AS base VDM: 1.177.0.0 NIS base VDM: 111.0.0.0

AV base VDM: 1.177.0.0 NIS full VDM: 111.25.0.0

AS delta VDM: 1.177.428.0

AV delta VDM: 1.177.428.0

 

================================ PatchApplication ================================

 

Patched nisfull.vdm to 111.25.0.0

 

================================= MpUpdateEngine =================================

 

Package files for the engine update:

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM (1.177.0.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM (1.177.428.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM (1.177.0.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM (1.177.428.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM (111.0.0.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\nisfull.vdm (111.25.0.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll (1.1.10701.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL (2.1.10502.0)

 

ERROR 0x800106ba : MpUpdateEngine(C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs)

 

================================== XcopyDeployment =================================

 

Using Xcopy location: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates

 

================================== XcopyForProduct =================================

 

Copied mpengine.dll

Copied mpasbase.vdm

Copied mpavbase.vdm

Copied mpasdlta.vdm

Copied mpavdlta.vdm

Copied gapaengine.dll

Copied nisbase.vdm

Copied nisfull.vdm

 

================================== ServiceStart ==================================

 

ERROR 0x80070005 : OpenServiceW

ERROR 0x80070005 : XcopyDeployment

ERROR 0x80070005 : IProduct->UpdateEngine

 

================================= ValidateUpdate =================================

 

mpengine.dll version in package is 1.1.10701.0, but after update machine has older version 1.1.10600.0

mpasbase.vdm version in package is 1.177.0.0, but after update machine has older version 1.175.0.0

mpavbase.vdm version in package is 1.177.0.0, but after update machine has older version 1.175.0.0

mpasdlta.vdm version in package is 1.177.428.0, but after update machine has older version 1.175.417.0

mpavdlta.vdm version in package is 1.177.428.0, but after update machine has older version 1.175.417.0

 

Watson Report: Position:

HRESULT: 0x80070005 P1

FailedFunction: MpUpdateEngine P2

Operation: AM FE P3

SourceComponentVersion: 11.1.4590.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: 4.5.218.0 P6

ProductName: Windows Defender P7

 

 

================================= ValidateUpdate =================================

 

nisfull.vdm version in package is 111.25.0.0, but after update machine has older version 111.19.0.0

 

Watson Report: Position:

HRESULT: 0x80070005 P1

FailedFunction: MpUpdateEngine P2

Operation: NIS Full P3

SourceComponentVersion: 11.1.4590.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: 4.5.218.0 P6

ProductName: Windows Defender P7

 

ERROR 0x80070005 : One or more of the packages found failed to update for Windows Defender.

ERROR 0x80070005 : One or more of the products found failed to update; returning this error

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\nisfull.vdm

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL

ERROR 0x80070005 : MpSigStubMain

End time: 6/21/2014 12:58 PM

----------------------------------------------------------------------------------

 

----------------------------------------------------------------------------------

Command: MpSigStub.exe /program "C:\Windows\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q

Start time: 6/21/2014 1:12 PM (version 11.1.4590.0)

 

=================================== ProductSearch ==================================

 

Windows Defender:

Status: Active

Product: 4.5.218.0

Engine: 1.1.10600.0

Signatures: 1.175.417.0

NIS Engine: 2.1.10502.0

NIS Signatures: 111.19.0.0

 

================================ PackageDiscovery ================================

 

Package files discovered:

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM (1.177.0.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM (1.177.428.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM (1.177.0.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM (1.177.428.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM (111.0.0.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll (1.1.10701.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL (2.1.10502.0)

 

AM FE: NIS Full:

Engine: 1.1.10701.0 NIS engine: 2.1.10502.0

AS base VDM: 1.177.0.0 NIS base VDM: 111.0.0.0

AV base VDM: 1.177.0.0 NIS full VDM: 111.25.0.0

AS delta VDM: 1.177.428.0

AV delta VDM: 1.177.428.0

 

================================ PatchApplication ================================

 

Patched nisfull.vdm to 111.25.0.0

 

================================= MpUpdateEngine =================================

 

Package files for the engine update:

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM (1.177.0.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM (1.177.428.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM (1.177.0.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM (1.177.428.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM (111.0.0.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\nisfull.vdm (111.25.0.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll (1.1.10701.0)

C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL (2.1.10502.0)

 

ERROR 0x800106ba : MpUpdateEngine(C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs)

 

================================== XcopyDeployment =================================

 

Using Xcopy location: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates

 

================================== XcopyForProduct =================================

 

Copied mpengine.dll

Copied mpasbase.vdm

Copied mpavbase.vdm

Copied mpasdlta.vdm

Copied mpavdlta.vdm

Copied gapaengine.dll

Copied nisbase.vdm

Copied nisfull.vdm

 

================================== ServiceStart ==================================

 

ERROR 0x80070005 : OpenServiceW

ERROR 0x80070005 : XcopyDeployment

ERROR 0x80070005 : IProduct->UpdateEngine

 

================================= ValidateUpdate =================================

 

mpengine.dll version in package is 1.1.10701.0, but after update machine has older version 1.1.10600.0

mpasbase.vdm version in package is 1.177.0.0, but after update machine has older version 1.175.0.0

mpavbase.vdm version in package is 1.177.0.0, but after update machine has older version 1.175.0.0

mpasdlta.vdm version in package is 1.177.428.0, but after update machine has older version 1.175.417.0

mpavdlta.vdm version in package is 1.177.428.0, but after update machine has older version 1.175.417.0

 

Watson Report: Position:

HRESULT: 0x80070005 P1

FailedFunction: MpUpdateEngine P2

Operation: AM FE P3

SourceComponentVersion: 11.1.4590.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: 4.5.218.0 P6

ProductName: Windows Defender P7

 

 

================================= ValidateUpdate =================================

 

nisfull.vdm version in package is 111.25.0.0, but after update machine has older version 111.19.0.0

 

Watson Report: Position:

HRESULT: 0x80070005 P1

FailedFunction: MpUpdateEngine P2

Operation: NIS Full P3

SourceComponentVersion: 11.1.4590.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: 4.5.218.0 P6

ProductName: Windows Defender P7

 

ERROR 0x80070005 : One or more of the packages found failed to update for Windows Defender.

ERROR 0x80070005 : One or more of the products found failed to update; returning this error

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\nisfull.vdm

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll

Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL

ERROR 0x80070005 : MpSigStubMain

End time: 6/21/2014 1:12 PM

----------------------------------------------------------------------------------

 

----------------------------------------------------------------------------------

Command: MpSigStub.exe /program mpas-feX64.exe

Start time: 6/21/2014 6:13 PM (version 11.1.4590.0)

 

================================= CacheMpSigStub =================================

 

Copied MpSigStub.exe to C:\Windows\system32\MpSigStub.exe

 

=================================== ProductSearch ==================================

 

Windows Defender:

Status: Active

Product: 4.5.218.0

Engine: 1.1.10600.0

Signatures: 1.175.417.0

NIS Engine: 2.1.10502.0

NIS Signatures: 111.19.0.0

 

================================ PackageDiscovery ================================

 

Package files discovered:

g:\f35bc339c879d07ec88e6dd8\mpasbase.vdm (1.175.0.0)

g:\f35bc339c879d07ec88e6dd8\mpasdlta.vdm (1.175.2365.0)

g:\f35bc339c879d07ec88e6dd8\mpengine.dll (1.1.10600.0)

 

AS FE:

Engine: 1.1.10600.0

AS base VDM: 1.175.0.0

AV base VDM: Not included

AS delta VDM: 1.175.2365.0

AV delta VDM: Not included

 

=============================== PackagesNotApplicable ==============================

 

No products found to update.

ERROR 0x80070490 : SearchForApplicableProducts

Deleted g:\f35bc339c879d07ec88e6dd8\mpasbase.vdm

Deleted g:\f35bc339c879d07ec88e6dd8\mpasdlta.vdm

Deleted g:\f35bc339c879d07ec88e6dd8\mpengine.dll

 

Watson Report: Position:

HRESULT: 0x80070490 P1

FailedFunction: PackagesNotApplicable P2

Operation: (null) P3

SourceComponentVersion: 11.1.4590.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: (null) P6

ProductName: (null) P7

 

ERROR 0x80070490 : MpSigStubMain

End time: 6/21/2014 6:13 PM

----------------------------------------------------------------------------------

 

Continue reading...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...