Page 1 of 2 12 LastLast
Results 1 to 15 of 18
  1. #1
    Lounger
    Join Date
    Feb 2001
    Location
    Washington, District Of Columbia, USA
    Posts
    37
    Thanks
    0
    Thanked 10 Times in 8 Posts

    Windows Defender Definition Update Breaks Windows Defender

    Re: Windows Defender Definition Update Saturday, 09 March 2013 — Eastern Time

    On two completely separate Windows 8 systems the Def update for Defender today resulted in the failure of both Quick and Full scans due to Defender's Service suddenly stopping. It can be restarted easily and the GUI appears normal, but manual scans of any kind will continue to fail.

    No third party real-time scanners or firewalls were installed on either system and no other system error or file corruption was evident.

    If this new bug can be confirmed on other systems and in general, it surely is an alarming botch-job on Microsoft's part.

  2. #2
    Super Moderator bbearren's Avatar
    Join Date
    Dec 2009
    Location
    Polk County, Florida
    Posts
    3,760
    Thanks
    26
    Thanked 424 Times in 338 Posts
    I just ran a quick scan with yesterday's update, and it seemed normal. I then updated with today's definitions, ran another quick scan, and it also seemed normal. Neither scan failed.
    Create a fresh drive image before making system changes, in case you need to start over!

    "The problem is not the problem. The problem is your attitude about the problem. Savvy?"—Captain Jack Sparrow "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns "Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware.
    Unleash Windows

  3. #3
    Super Moderator RetiredGeek's Avatar
    Join Date
    Mar 2004
    Location
    Manning, South Carolina
    Posts
    9,434
    Thanks
    372
    Thanked 1,457 Times in 1,326 Posts
    Very Interesting!

    I just ran a Quick scan with the same results.

    I manually restarted the service (which btw reported it was already running) with the same result.
    Rebooted & Updated (got new defs).
    Same Results!
    WDError.JPG
    Clicked the RED Restart button and got this:
    WDafterclick.JPG

    Time to run Malwarebytes and some other on-demand-scanners!
    May the Forces of good computing be with you!

    RG

    PowerShell & VBA Rule!

    My Systems: Desktop Specs
    Laptop Specs

  4. #4
    4 Star Lounger
    Join Date
    Dec 2009
    Location
    Fishkill, New York, USA
    Posts
    435
    Thanks
    96
    Thanked 35 Times in 31 Posts
    Experiencing the same behavior. First time I tried a quick scan it stalled after 31 seconds. Rebooted and did an update and ran a quick scan again. This time it
    seemingly completed only to end with attached message.

    Rich

    WinDefender.PNG

    3/10/13 Two friends have reported same behavior as above. The 3/10 update Virus definition version: 1.145.1483.0
    Spyware definition version: 1.145.1483.0 did not make any difference. Must agree with Clint - a Microsoft fix.
    Last edited by rmonroe36; 2013-03-10 at 08:49. Reason: Additional info

  5. #5
    Super Moderator bbearren's Avatar
    Join Date
    Dec 2009
    Location
    Polk County, Florida
    Posts
    3,760
    Thanks
    26
    Thanked 424 Times in 338 Posts
    After seeing posts #3 and #4, I ran another quick scan with Windows Defender, and this time it choked. I ran a quick scan with Malwarebytes, and it didn't turn up anything.

    Does Microsoft have a problem?
    Create a fresh drive image before making system changes, in case you need to start over!

    "The problem is not the problem. The problem is your attitude about the problem. Savvy?"—Captain Jack Sparrow "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns "Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware.
    Unleash Windows

  6. #6
    4 Star Lounger
    Join Date
    Dec 2009
    Location
    Fishkill, New York, USA
    Posts
    435
    Thanks
    96
    Thanked 35 Times in 31 Posts
    Found this in Event Viewer. Perhaps more knowledgeable members can shed some light on this.

    Rich

    Log Name: Application
    Source: Application Error
    Date: 3/9/2013 7:07:32 PM
    Event ID: 1000
    Task Category: (100)
    Level: Error
    Keywords: Classic
    User: N/A
    Computer: Dick-Home
    Description:
    Faulting application name: MsMpEng.exe, version: 4.0.9200.16384, time stamp: 0x5010a938
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x00000001038ee054
    Faulting process id: 0x7e4
    Faulting application start time: 0x01ce1d2312936597
    Faulting application path: C:\Program Files\Windows Defender\MsMpEng.exe
    Faulting module path: unknown
    Report Id: 807225e4-8916-11e2-bedd-90e6ba1caf4d
    Faulting package full name:
    Faulting package-relative application ID:
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-03-10T00:07:32.000000000Z" />
    <EventRecordID>16416</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Dick-Home</Computer>
    <Security />
    </System>
    <EventData>
    <Data>MsMpEng.exe</Data>
    <Data>4.0.9200.16384</Data>
    <Data>5010a938</Data>
    <Data>unknown</Data>
    <Data>0.0.0.0</Data>
    <Data>00000000</Data>
    <Data>c0000005</Data>
    <Data>00000001038ee054</Data>
    <Data>7e4</Data>
    <Data>01ce1d2312936597</Data>
    <Data>C:\Program Files\Windows Defender\MsMpEng.exe</Data>
    <Data>unknown</Data>
    <Data>807225e4-8916-11e2-bedd-90e6ba1caf4d</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    </EventData>
    </Event>

  7. #7
    Super Moderator CLiNT's Avatar
    Join Date
    Dec 2009
    Location
    California & Arizona
    Posts
    6,121
    Thanks
    160
    Thanked 609 Times in 557 Posts
    I've had the very same problem for the last few days as well. I think this one is gonna end up having to be an MS fix.
    WD01.jpg

    It appears to be some from of dysfunctional loop where you have to "turn on" the client. You then scan your system only
    to get back to the same issue of the service being shut down, but only as the scan nears it's completion.
    Last edited by CLiNT; 2013-03-10 at 07:09.
    DRIVE IMAGING
    Invest a little time and energy in a well thought out BACKUP regimen and you will have minimal down time, and headache.

    Build your own system; get everything you want and nothing you don't.
    Latest Build:
    ASUS X99 Deluxe, Core i7-5960X, Corsair Hydro H100i, Plextor M6e 256GB M.2 SSD, Corsair DOMINATOR Platinum 32GB DDR4@2666, W8.1 64 bit,
    EVGA GTX980, Seasonic PLATINUM-1000W PSU, MountainMods U2-UFO Case, and 7 other internal drives.

  8. #8
    WS Lounge VIP Browni's Avatar
    Join Date
    Dec 2009
    Location
    Rochdale, UK
    Posts
    1,650
    Thanks
    38
    Thanked 161 Times in 139 Posts
    Hmm,

    I wonder what could be different on my system as it is working fine here (Win8x64 Pro fully up to date)

    An automatic scan took place at 3am and I have just successfully ran a manual quick scan.

    I have also just ran a manual update and again a quick scan was successful.

    To see if it was related to a service not starting I restarted the system and again, a quick scan was successful.

    windef1.PNG

  9. #9
    New Lounger
    Join Date
    Mar 2013
    Posts
    1
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Same problem here with a W8 Pro system, all the latest updates, and that is possibly what broke Windows Defender.

    BTW: sometimes a scan worked out OK.
    My latest Def.
    Virus definition version: 1.145.1483.0
    Spyware definition version: 1.145.1483.0
    created on 09-03-2013 at 23:17

    Anyone with similar def version having the same problem?

    Hope to see a fix from Microsoft soon.

  10. #10
    Super Moderator bbearren's Avatar
    Join Date
    Dec 2009
    Location
    Polk County, Florida
    Posts
    3,760
    Thanks
    26
    Thanked 424 Times in 338 Posts
    Not only is it turning off during a scan, I would also get a notice from the Action Center every few minutes that Windows Defender was not turned on and my PC was vulnerable. I would turn it on, only to see the same notice again after about 5 minutes.

    I'm hiding out in Windows 7 until Microsoft gets this one under control. MSE seems to have no such difficulties.
    Create a fresh drive image before making system changes, in case you need to start over!

    "The problem is not the problem. The problem is your attitude about the problem. Savvy?"—Captain Jack Sparrow "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns "Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware.
    Unleash Windows

  11. #11
    2 Star Lounger
    Join Date
    Dec 2009
    Location
    Norwich, England
    Posts
    174
    Thanks
    16
    Thanked 15 Times in 15 Posts
    This Microsoft thread http://answers.microsoft.com/en-us/p...=1362924972262 includes a workaround.

  12. #12
    Super Moderator CLiNT's Avatar
    Join Date
    Dec 2009
    Location
    California & Arizona
    Posts
    6,121
    Thanks
    160
    Thanked 609 Times in 557 Posts
    It seems to be working for me this morning; Did a couple of quick scans and a custom, a full scan would take too long as I have 7 internal drives.
    But it seems to be working at this point with seemingly no correction on my part. [??]
    DRIVE IMAGING
    Invest a little time and energy in a well thought out BACKUP regimen and you will have minimal down time, and headache.

    Build your own system; get everything you want and nothing you don't.
    Latest Build:
    ASUS X99 Deluxe, Core i7-5960X, Corsair Hydro H100i, Plextor M6e 256GB M.2 SSD, Corsair DOMINATOR Platinum 32GB DDR4@2666, W8.1 64 bit,
    EVGA GTX980, Seasonic PLATINUM-1000W PSU, MountainMods U2-UFO Case, and 7 other internal drives.

  13. #13
    Super Moderator RetiredGeek's Avatar
    Join Date
    Mar 2004
    Location
    Manning, South Carolina
    Posts
    9,434
    Thanks
    372
    Thanked 1,457 Times in 1,326 Posts
    Mine is also working today.
    May the Forces of good computing be with you!

    RG

    PowerShell & VBA Rule!

    My Systems: Desktop Specs
    Laptop Specs

  14. #14
    4 Star Lounger
    Join Date
    Dec 2009
    Location
    Fishkill, New York, USA
    Posts
    435
    Thanks
    96
    Thanked 35 Times in 31 Posts
    So is mine - go figure

    Rich

  15. #15
    Lounger
    Join Date
    Feb 2001
    Location
    Washington, District Of Columbia, USA
    Posts
    37
    Thanks
    0
    Thanked 10 Times in 8 Posts
    Further to defective Defender Definitions:

    Sunday morning, 9 pm, Eastern Time: Definition 1.145.1483.0 continued to fail scans with 'stopped service' error.

    Sunday afternoon, 2 pm, Eastern Time: Definition 1.145.1493.0 completes scans normally.

    No botched definition updates ever surely would be ideal, but Microsoft appears to have caught this bug very quickly indeed.


    P.S. What made this episode a little hair raising is that I was inclined to associate a 'service' failure with a deep application corruption. Defender in 8 is not easily repaired as Microsoft Security Essentials [MSE] can be in 7. An image recovery (Acronis), initially with 3-day old defs and subsequent update, finally demonstrated that the Defender app itself was sound but the recent definitions not.

    At the Microsoft Community, linked above by John259, a number of posters were equally disquieted by the apparent breakdown of Defender, undertook extensive troubleshooting, and in one case at least, a complete Windows 8 reinstallation.

    Overarching lesson here: current images of known-sound systems are simply necessary and invaluable.
    Last edited by HansPeter; 2013-03-10 at 14:50.

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •