ERROR 0x80070490 : MpSigStubMain - Windows Defender Updates

Anonymous
2014-06-17T02:28:27+00:00

I'm seeing a similar problem - last raft of windows updates for my win8.1 x64 machine, everything works fine except the definition update for defender. I've tried downloading the definition update directly and ran the mpas-fex64.exe, which simply returns, no messages, but update still fails. Here's the mpsig* information showing defender's got some dll's out of sync. My guess is this has been failing for awhile. Any way to repair it short of a reinstall? 

Command:    MpSigStub.exe /program "C:\Windows\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q

Start time: 6/15/2014 5:40 PM (version 11.1.4590.0)

=================================== ProductSearch ==================================

                 Windows Defender:

         Status: Active           

        Product: 4.5.218.0        

         Engine: 1.1.10600.0      

     Signatures: 1.175.417.0      

     NIS Engine: 2.1.10502.0      

 NIS Signatures: 111.19.0.0       

================================ PackageDiscovery ================================

Package files discovered:

C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)

C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPASDLTA.VDM (1.175.2352.0)

C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPAVDLTA.VDM (1.175.2352.0)

C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\NISBASE.VDM (111.0.0.0)

C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\GAPAENGINE.DLL (2.1.10502.0)

               AM Delta:                    NIS Full:  

       Engine: Not included  NIS engine:    2.1.10502.0

  AS base VDM: Not included  NIS base VDM:  111.0.0.0  

  AV base VDM: Not included  NIS full VDM:  111.25.0.0 

 AS delta VDM: 1.175.2352.0

 AV delta VDM: 1.175.2352.0

================================ PatchApplication ================================

Patched nisfull.vdm to 111.25.0.0

================================= MpUpdateEngine =================================

Package files for the engine update:

C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)

C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPASDLTA.VDM (1.175.2352.0)

C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPAVDLTA.VDM (1.175.2352.0)

C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\NISBASE.VDM (111.0.0.0)

C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\nisfull.vdm (111.25.0.0)

C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\GAPAENGINE.DLL (2.1.10502.0)

ERROR 0x800106ba : MpUpdateEngine(C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs)

================================== XcopyDeployment =================================

Using Xcopy location: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates

================================== XcopyForProduct =================================

     Copied mpasdlta.vdm

     Copied mpavdlta.vdm

     Copied gapaengine.dll

     Copied nisbase.vdm

     Copied nisfull.vdm

================================== ServiceStart ==================================

ERROR 0x80070005 : OpenServiceW

ERROR 0x80070005 : XcopyDeployment

ERROR 0x80070005 : IProduct->UpdateEngine

================================= ValidateUpdate =================================

mpasdlta.vdm version in package is 1.175.2352.0, but after update machine has older version 1.175.417.0

mpavdlta.vdm version in package is 1.175.2352.0, but after update machine has older version 1.175.417.0

                         Watson Report:    Position:

                HRESULT: 0x80070005        P1       

         FailedFunction: MpUpdateEngine    P2       

              Operation: AM Delta          P3       

 SourceComponentVersion: 11.1.4590.0       P4       

    SourceComponentName: mpsigstub.exe     P5       

         ProductVersion: 4.5.218.0         P6       

            ProductName: Windows Defender  P7       

ERROR 0x800106ba : MpConfigSetValue(DeltaUpdateFailure)

================================= ValidateUpdate =================================

nisfull.vdm version in package is 111.25.0.0, but after update machine has older version 111.19.0.0

                         Watson Report:    Position:

                HRESULT: 0x80070005        P1       

         FailedFunction: MpUpdateEngine    P2       

              Operation: NIS Full          P3       

 SourceComponentVersion: 11.1.4590.0       P4       

    SourceComponentName: mpsigstub.exe     P5       

         ProductVersion: 4.5.218.0         P6       

            ProductName: Windows Defender  P7       

ERROR 0x80070005 : One or more of the packages found failed to update for Windows Defender.

ERROR 0x80070005 : One or more of the products found failed to update; returning this error

Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P

Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPASDLTA.VDM

Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPAVDLTA.VDM

Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\NISBASE.VDM

Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\nisfull.vdm

Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\GAPAENGINE.DLL

ERROR 0x80070005 : MpSigStubMain

End time: 6/15/2014 5:40 PM

Command:    MpSigStub.exe /program "C:\Users\matt\Downloads\mpas-feX64.exe" 

Start time: 6/15/2014 5:44 PM (version 11.1.4590.0)

=================================== ProductSearch ==================================

                 Windows Defender:

         Status: Active           

        Product: 4.5.218.0        

         Engine: 1.1.10600.0      

     Signatures: 1.175.417.0      

     NIS Engine: 2.1.10502.0      

 NIS Signatures: 111.19.0.0       

================================ PackageDiscovery ================================

Package files discovered:

g:\59630698aa14776ecf0f\mpasbase.vdm (1.175.0.0)

g:\59630698aa14776ecf0f\mpasdlta.vdm (1.175.2365.0)

g:\59630698aa14776ecf0f\mpengine.dll (1.1.10600.0)

               AS FE:      

       Engine: 1.1.10600.0 

  AS base VDM: 1.175.0.0   

  AV base VDM: Not included

 AS delta VDM: 1.175.2365.0

 AV delta VDM: Not included

=============================== PackagesNotApplicable ==============================

No products found to update.

ERROR 0x80070490 : SearchForApplicableProducts

Deleted g:\59630698aa14776ecf0f\mpasbase.vdm

Deleted g:\59630698aa14776ecf0f\mpasdlta.vdm

Deleted g:\59630698aa14776ecf0f\mpengine.dll

                         Watson Report:         Position:

                HRESULT: 0x80070490             P1       

         FailedFunction: PackagesNotApplicable  P2       

              Operation: (null)                 P3       

 SourceComponentVersion: 11.1.4590.0            P4       

    SourceComponentName: mpsigstub.exe          P5       

         ProductVersion: (null)                 P6       

            ProductName: (null)                 P7       

ERROR 0x80070490 : MpSigStubMain

End time: 6/15/2014 5:44 PM

Command:    MpSigStub.exe /program "C:\Users\matt\Downloads\mpas-feX64.exe" 

Start time: 6/15/2014 5:44 PM (version 11.1.4590.0)

================================= CacheMpSigStub =================================

Copied MpSigStub.exe to C:\Windows\system32\MpSigStub.exe

=================================== ProductSearch ==================================

                 Windows Defender:

         Status: Active           

        Product: 4.5.218.0        

         Engine: 1.1.10600.0      

     Signatures: 1.175.417.0      

     NIS Engine: 2.1.10502.0      

 NIS Signatures: 111.19.0.0       

================================ PackageDiscovery ================================

Package files discovered:

g:\475cf70691f8cad655a4e80355955bd3\mpasbase.vdm (1.175.0.0)

g:\475cf70691f8cad655a4e80355955bd3\mpasdlta.vdm (1.175.2365.0)

g:\475cf70691f8cad655a4e80355955bd3\mpengine.dll (1.1.10600.0)

               AS FE:      

       Engine: 1.1.10600.0 

  AS base VDM: 1.175.0.0   

  AV base VDM: Not included

 AS delta VDM: 1.175.2365.0

 AV delta VDM: Not included

=============================== PackagesNotApplicable ==============================

No products found to update.

ERROR 0x80070490 : SearchForApplicableProducts

Deleted g:\475cf70691f8cad655a4e80355955bd3\mpasbase.vdm

Deleted g:\475cf70691f8cad655a4e80355955bd3\mpasdlta.vdm

Deleted g:\475cf70691f8cad655a4e80355955bd3\mpengine.dll

                         Watson Report:         Position:

                HRESULT: 0x80070490             P1       

         FailedFunction: PackagesNotApplicable  P2       

              Operation: (null)                 P3       

 SourceComponentVersion: 11.1.4590.0            P4       

    SourceComponentName: mpsigstub.exe          P5       

         ProductVersion: (null)                 P6       

            ProductName: (null)                 P7       

ERROR 0x80070490 : MpSigStubMain

End time: 6/15/2014 5:45 PM

Command:    MpSigStub.exe /program mpas-feX64.exe

Start time: 6/15/2014 5:54 PM (version 11.1.4590.0)

=================================== ProductSearch ==================================

                 Windows Defender:

         Status: Active           

        Product: 4.5.218.0        

         Engine: 1.1.10600.0      

     Signatures: 1.175.417.0      

     NIS Engine: 2.1.10502.0      

 NIS Signatures: 111.19.0.0       

================================ PackageDiscovery ================================

Package files discovered:

g:\4ce5e2e04bedb5f9f42e6449d1\mpasbase.vdm (1.175.0.0)

g:\4ce5e2e04bedb5f9f42e6449d1\mpasdlta.vdm (1.175.2365.0)

g:\4ce5e2e04bedb5f9f42e6449d1\mpengine.dll (1.1.10600.0)

               AS FE:      

       Engine: 1.1.10600.0 

  AS base VDM: 1.175.0.0   

  AV base VDM: Not included

 AS delta VDM: 1.175.2365.0

 AV delta VDM: Not included

=============================== PackagesNotApplicable ==============================

No products found to update.

ERROR 0x80070490 : SearchForApplicableProducts

Deleted g:\4ce5e2e04bedb5f9f42e6449d1\mpasbase.vdm

Deleted g:\4ce5e2e04bedb5f9f42e6449d1\mpasdlta.vdm

Deleted g:\4ce5e2e04bedb5f9f42e6449d1\mpengine.dll

                         Watson Report:         Position:

                HRESULT: 0x80070490             P1       

         FailedFunction: PackagesNotApplicable  P2       

              Operation: (null)                 P3       

 SourceComponentVersion: 11.1.4590.0            P4       

    SourceComponentName: mpsigstub.exe          P5       

         ProductVersion: (null)                 P6       

            ProductName: (null)                 P7       

ERROR 0x80070490 : MpSigStubMain

End time: 6/15/2014 5:54 PM

Command:    MpSigStub.exe /program mpas-feX64.exe

Start time: 6/15/2014 5:55 PM (version 11.1.4590.0)

================================= CacheMpSigStub =================================

Copied MpSigStub.exe to C:\Windows\system32\MpSigStub.exe

=================================== ProductSearch ==================================

                 Windows Defender:

         Status: Active           

        Product: 4.5.218.0        

         Engine: 1.1.10600.0      

     Signatures: 1.175.417.0      

     NIS Engine: 2.1.10502.0      

 NIS Signatures: 111.19.0.0       

================================ PackageDiscovery ================================

Package files discovered:

g:\4b9a1d7f8d9a34ddc32118c9\mpasbase.vdm (1.175.0.0)

g:\4b9a1d7f8d9a34ddc32118c9\mpasdlta.vdm (1.175.2365.0)

g:\4b9a1d7f8d9a34ddc32118c9\mpengine.dll (1.1.10600.0)

               AS FE:      

       Engine: 1.1.10600.0 

  AS base VDM: 1.175.0.0   

  AV base VDM: Not included

 AS delta VDM: 1.175.2365.0

 AV delta VDM: Not included

=============================== PackagesNotApplicable ==============================

No products found to update.

ERROR 0x80070490 : SearchForApplicableProducts

Deleted g:\4b9a1d7f8d9a34ddc32118c9\mpasbase.vdm

Deleted g:\4b9a1d7f8d9a34ddc32118c9\mpasdlta.vdm

Deleted g:\4b9a1d7f8d9a34ddc32118c9\mpengine.dll

                         Watson Report:         Position:

                HRESULT: 0x80070490             P1       

         FailedFunction: PackagesNotApplicable  P2       

              Operation: (null)                 P3       

 SourceComponentVersion: 11.1.4590.0            P4       

    SourceComponentName: mpsigstub.exe          P5       

         ProductVersion: (null)                 P6       

            ProductName: (null)                 P7       

ERROR 0x80070490 : MpSigStubMain

End time: 6/15/2014 5:55 PM

Windows for home | Previous Windows versions | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2014-07-08T09:27:06+00:00

Yes, you can try deleting that file, it'll rebuild, but rename instead of deleting. And you can try changing registry value to MpScanCache-0.bin, instead of MpScanCache-1.bin. Registry Editor will not be able to change the value (permission problems), so you have to open Registry Editor with the method I discussed in answer to this thread:

http://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_start/cant-turn-the-security-on-win-81-x64/95ea798e-6993-45ad-9a75-2ce1ac2e68b3

One more question:

What is the value of SFCState key in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Scan?

Prashant Kumar

Was this answer helpful?

0 comments

50 additional answers

Sort by: Newest
Most helpful Newest Oldest
  1. Anonymous
    2014-06-22T21:41:08+00:00

    0x80070005

    This error signifies a permissions problem, meaning Access Denied.

    I'd consider this:

    Restore, reset, refresh Windows 8: http://windows.microsoft.com/en-US/windows-8/restore-refresh-reset-pc

    I suspect an infection...

    Try Hitman Pro Trial Version: http://www.surfright.nl/en/hitmanpro This program may be run from a flash drive.

    And/or

    Try TDSS Killer: http://www.bleepingcomputer.com/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller TDSS Killer may be run from a flash drive.

    You may wish to download (on an uninfected PC) one or more of the following rescue scanners to create bootable media to scan the infected PC (list courtesy of forum member, GreginMich):

    http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline

    http://support.kaspersky.com/us/viruses/rescuedisk

    http://www.f-secure.com/en\_EMEA-Labs/security-threats/tools/rescue-cd/

    http://www.bitdefender.com/support/How-to-create-a-BitDefender-Rescue-CD-627.html

    http://www.avira.com/en/support-download-avira-antivir-rescue-system

    http://www.avg.com/us-en/avg-rescue-cd-download

    http://www.freedrweb.com/livecd/

    http://www.superantispyware.com/portablescanner.html

    http://support.kaspersky.com/faq/?qid=208283363

    http://www.eset.com/int/download/utilities/detail/family/239/

    Each rescue scanner will miss things – because none of them will have a perfectly complete and up-to-date set of definitions; so you might need to use several of these rescue scanners, or something like the Shardana Antivirus Rescue Disk Utility, which creates a custom bootable CD or flash drive that includes multiple rescue scanners:

    http://www.sarducd.it/ -- be sure to decline all of the additional junk being offered when you install the download for SARDU. I tested this install recently and the first offer was for the hated and difficult to remove Delta Search Toolbar.

    Another boot CD (similar to Shardana) to consider is Hiren's Boot CD.

    You can also  start here - https://support.microsoftsecurityessentials.com/ and select the link that says - I think my computer is infected. Options will vary by region, but phone support leads you to Microsoft Answer Desk (http://www.answerdesk.com/) in the US at this time. After an initial free consultation, a fee will be charged for assistance, based on the details of the case.

    This web site - http://www.bleepingcomputer.com- contains details for many of the common infections, often immediately after they began to appear in the wild, and instructions are provided for how to remove the infections using their malware removal guides. They also have forums where you can seek help from people who specialize in malware removal.

    This may also be helpful - How to get rid of malware:

    http://answers.microsoft.com/en-us/windows/forum/windows_vista-security/how-to-get-rid-of-malware/ba80504b-61f1-4d71-960f-b561798b7b42

    -steve

    Was this answer helpful?

    0 comments
  2. Anonymous
    2014-06-22T14:22:48+00:00

    Windows Defender update just fails, and WIndows defender never starts.

    I have tried:

    resetting everything (%temp%, %windir%\temp and SoftwardDistribution). No luck - fails (8007002)

    Doing same logged in as administrator - same results

    Running the update from an administrative command prompt - nothing happens

    Running some exe (there was information in a related thread that I replied to, but it seems to have been purged) which says, "Sorry, no can do as the service isn't running". Some exe that took a -resetdefinition flag, unfortunately lost the info.

    Most frustrating. This is all WIndows Defender and WIndows update stepping on each other, i.e,, I haven't done anything on this machine that I would expect impact this -> no running of registry cleaners directly.

    FWIW Visual Studio 2010 SP1 is also failing to to install, not that I care much and I just want to get Defender going again.

    Here is the mpsigstub.exe log showing my last 2 (of many) attempts to update windows defender via windows update:

    Command:    MpSigStub.exe /program "C:\Windows\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q

    Start time: 6/21/2014 12:58 PM (version 11.1.4590.0)

    =================================== ProductSearch ==================================

                     Windows Defender:

             Status: Active           

            Product: 4.5.218.0        

             Engine: 1.1.10600.0      

         Signatures: 1.175.417.0      

         NIS Engine: 2.1.10502.0      

     NIS Signatures: 111.19.0.0       

    ================================ PackageDiscovery ================================

    Package files discovered:

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM (1.177.0.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM (1.177.428.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM (1.177.0.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM (1.177.428.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM (111.0.0.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll (1.1.10701.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL (2.1.10502.0)

                   AM FE:                      NIS Full:  

           Engine: 1.1.10701.0  NIS engine:    2.1.10502.0

      AS base VDM: 1.177.0.0    NIS base VDM:  111.0.0.0  

      AV base VDM: 1.177.0.0    NIS full VDM:  111.25.0.0 

     AS delta VDM: 1.177.428.0

     AV delta VDM: 1.177.428.0

    ================================ PatchApplication ================================

    Patched nisfull.vdm to 111.25.0.0

    ================================= MpUpdateEngine =================================

    Package files for the engine update:

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM (1.177.0.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM (1.177.428.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM (1.177.0.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM (1.177.428.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM (111.0.0.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\nisfull.vdm (111.25.0.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll (1.1.10701.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL (2.1.10502.0)

    ERROR 0x800106ba : MpUpdateEngine(C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs)

    ================================== XcopyDeployment =================================

    Using Xcopy location: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates

    ================================== XcopyForProduct =================================

         Copied mpengine.dll

         Copied mpasbase.vdm

         Copied mpavbase.vdm

         Copied mpasdlta.vdm

         Copied mpavdlta.vdm

         Copied gapaengine.dll

         Copied nisbase.vdm

         Copied nisfull.vdm

    ================================== ServiceStart ==================================

    ERROR 0x80070005 : OpenServiceW

    ERROR 0x80070005 : XcopyDeployment

    ERROR 0x80070005 : IProduct->UpdateEngine

    ================================= ValidateUpdate =================================

    mpengine.dll version in package is 1.1.10701.0, but after update machine has older version 1.1.10600.0

    mpasbase.vdm version in package is 1.177.0.0, but after update machine has older version 1.175.0.0

    mpavbase.vdm version in package is 1.177.0.0, but after update machine has older version 1.175.0.0

    mpasdlta.vdm version in package is 1.177.428.0, but after update machine has older version 1.175.417.0

    mpavdlta.vdm version in package is 1.177.428.0, but after update machine has older version 1.175.417.0

                             Watson Report:    Position:

                    HRESULT: 0x80070005        P1       

             FailedFunction: MpUpdateEngine    P2       

                  Operation: AM FE             P3       

     SourceComponentVersion: 11.1.4590.0       P4       

        SourceComponentName: mpsigstub.exe     P5       

             ProductVersion: 4.5.218.0         P6       

                ProductName: Windows Defender  P7       

    ================================= ValidateUpdate =================================

    nisfull.vdm version in package is 111.25.0.0, but after update machine has older version 111.19.0.0

                             Watson Report:    Position:

                    HRESULT: 0x80070005        P1       

             FailedFunction: MpUpdateEngine    P2       

                  Operation: NIS Full          P3       

     SourceComponentVersion: 11.1.4590.0       P4       

        SourceComponentName: mpsigstub.exe     P5       

             ProductVersion: 4.5.218.0         P6       

                ProductName: Windows Defender  P7       

    ERROR 0x80070005 : One or more of the packages found failed to update for Windows Defender.

    ERROR 0x80070005 : One or more of the products found failed to update; returning this error

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\nisfull.vdm

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL

    ERROR 0x80070005 : MpSigStubMain

    End time: 6/21/2014 12:58 PM

    Command:    MpSigStub.exe /program "C:\Windows\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q

    Start time: 6/21/2014 1:12 PM (version 11.1.4590.0)

    =================================== ProductSearch ==================================

                     Windows Defender:

             Status: Active           

            Product: 4.5.218.0        

             Engine: 1.1.10600.0      

         Signatures: 1.175.417.0      

         NIS Engine: 2.1.10502.0      

     NIS Signatures: 111.19.0.0       

    ================================ PackageDiscovery ================================

    Package files discovered:

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM (1.177.0.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM (1.177.428.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM (1.177.0.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM (1.177.428.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM (111.0.0.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll (1.1.10701.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL (2.1.10502.0)

                   AM FE:                      NIS Full:  

           Engine: 1.1.10701.0  NIS engine:    2.1.10502.0

      AS base VDM: 1.177.0.0    NIS base VDM:  111.0.0.0  

      AV base VDM: 1.177.0.0    NIS full VDM:  111.25.0.0 

     AS delta VDM: 1.177.428.0

     AV delta VDM: 1.177.428.0

    ================================ PatchApplication ================================

    Patched nisfull.vdm to 111.25.0.0

    ================================= MpUpdateEngine =================================

    Package files for the engine update:

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM (1.177.0.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM (1.177.428.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM (1.177.0.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM (1.177.428.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM (111.0.0.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\nisfull.vdm (111.25.0.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll (1.1.10701.0)

    C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL (2.1.10502.0)

    ERROR 0x800106ba : MpUpdateEngine(C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs)

    ================================== XcopyDeployment =================================

    Using Xcopy location: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates

    ================================== XcopyForProduct =================================

         Copied mpengine.dll

         Copied mpasbase.vdm

         Copied mpavbase.vdm

         Copied mpasdlta.vdm

         Copied mpavdlta.vdm

         Copied gapaengine.dll

         Copied nisbase.vdm

         Copied nisfull.vdm

    ================================== ServiceStart ==================================

    ERROR 0x80070005 : OpenServiceW

    ERROR 0x80070005 : XcopyDeployment

    ERROR 0x80070005 : IProduct->UpdateEngine

    ================================= ValidateUpdate =================================

    mpengine.dll version in package is 1.1.10701.0, but after update machine has older version 1.1.10600.0

    mpasbase.vdm version in package is 1.177.0.0, but after update machine has older version 1.175.0.0

    mpavbase.vdm version in package is 1.177.0.0, but after update machine has older version 1.175.0.0

    mpasdlta.vdm version in package is 1.177.428.0, but after update machine has older version 1.175.417.0

    mpavdlta.vdm version in package is 1.177.428.0, but after update machine has older version 1.175.417.0

                             Watson Report:    Position:

                    HRESULT: 0x80070005        P1       

             FailedFunction: MpUpdateEngine    P2       

                  Operation: AM FE             P3       

     SourceComponentVersion: 11.1.4590.0       P4       

        SourceComponentName: mpsigstub.exe     P5       

             ProductVersion: 4.5.218.0         P6       

                ProductName: Windows Defender  P7       

    ================================= ValidateUpdate =================================

    nisfull.vdm version in package is 111.25.0.0, but after update machine has older version 111.19.0.0

                             Watson Report:    Position:

                    HRESULT: 0x80070005        P1       

             FailedFunction: MpUpdateEngine    P2       

                  Operation: NIS Full          P3       

     SourceComponentVersion: 11.1.4590.0       P4       

        SourceComponentName: mpsigstub.exe     P5       

             ProductVersion: 4.5.218.0         P6       

                ProductName: Windows Defender  P7       

    ERROR 0x80070005 : One or more of the packages found failed to update for Windows Defender.

    ERROR 0x80070005 : One or more of the products found failed to update; returning this error

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASBASE.VDM

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPASDLTA.VDM

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVBASE.VDM

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\MPAVDLTA.VDM

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\NISBASE.VDM

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\nisfull.vdm

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\mpengine.dll

    Deleted C:\Windows\Temp\8B2B74B7C6AA8574482A17FBDED17143-Sigs\GAPAENGINE.DLL

    ERROR 0x80070005 : MpSigStubMain

    End time: 6/21/2014 1:12 PM

    Command:    MpSigStub.exe /program mpas-feX64.exe

    Start time: 6/21/2014 6:13 PM (version 11.1.4590.0)

    ================================= CacheMpSigStub =================================

    Copied MpSigStub.exe to C:\Windows\system32\MpSigStub.exe

    =================================== ProductSearch ==================================

                     Windows Defender:

             Status: Active           

            Product: 4.5.218.0        

             Engine: 1.1.10600.0      

         Signatures: 1.175.417.0      

         NIS Engine: 2.1.10502.0      

     NIS Signatures: 111.19.0.0       

    ================================ PackageDiscovery ================================

    Package files discovered:

    g:\f35bc339c879d07ec88e6dd8\mpasbase.vdm (1.175.0.0)

    g:\f35bc339c879d07ec88e6dd8\mpasdlta.vdm (1.175.2365.0)

    g:\f35bc339c879d07ec88e6dd8\mpengine.dll (1.1.10600.0)

                   AS FE:      

           Engine: 1.1.10600.0 

      AS base VDM: 1.175.0.0   

      AV base VDM: Not included

     AS delta VDM: 1.175.2365.0

     AV delta VDM: Not included

    =============================== PackagesNotApplicable ==============================

    No products found to update.

    ERROR 0x80070490 : SearchForApplicableProducts

    Deleted g:\f35bc339c879d07ec88e6dd8\mpasbase.vdm

    Deleted g:\f35bc339c879d07ec88e6dd8\mpasdlta.vdm

    Deleted g:\f35bc339c879d07ec88e6dd8\mpengine.dll

                             Watson Report:         Position:

                    HRESULT: 0x80070490             P1       

             FailedFunction: PackagesNotApplicable  P2       

                  Operation: (null)                 P3       

     SourceComponentVersion: 11.1.4590.0            P4       

        SourceComponentName: mpsigstub.exe          P5       

             ProductVersion: (null)                 P6       

                ProductName: (null)                 P7       

    ERROR 0x80070490 : MpSigStubMain

    End time: 6/21/2014 6:13 PM

    Was this answer helpful?

    0 comments
  3. Anonymous
    2014-06-17T04:06:29+00:00

    Sorry, due to lack of time I can't help you much but one thing I want to point out is that you have probably downloaded wrong manual update. Correct link for Windows Defender in Windows 8.1 is:

    http://go.microsoft.com/fwlink/?LinkID=121721&arch=x64

    If you see the log:

    Command:    MpSigStub.exe /program "C:\Users\matt\Downloads\mpas-feX64.exe" 

    Start time: 6/15/2014 5:44 PM (version 11.1.4590.0)

    ================================= CacheMpSigStub =================================

    Copied MpSigStub.exe to C:\Windows\system32\MpSigStub.exe

    =================================== ProductSearch ==================================

                     Windows Defender:

             Status: Active           

            Product: 4.5.218.0        

             Engine: 1.1.10600.0      

         Signatures: 1.175.417.0      

         NIS Engine: 2.1.10502.0      

     NIS Signatures: 111.19.0.0       

    ================================ PackageDiscovery ================================

    Package files discovered:

    g:\475cf70691f8cad655a4e80355955bd3\mpasbase.vdm (1.175.0.0)

    g:\475cf70691f8cad655a4e80355955bd3\mpasdlta.vdm (1.175.2365.0)

    g:\475cf70691f8cad655a4e80355955bd3\mpengine.dll (1.1.10600.0)

                   AS FE:      

           Engine: 1.1.10600.0 

      AS base VDM: 1.175.0.0   

      AV base VDM: Not included

     AS delta VDM: 1.175.2365.0

     AV delta VDM: Not included

    =============================== PackagesNotApplicable ==============================

    No products found to update.

    ERROR 0x80070490 : SearchForApplicableProducts

    Deleted g:\475cf70691f8cad655a4e80355955bd3\mpasbase.vdm

    Deleted g:\475cf70691f8cad655a4e80355955bd3\mpasdlta.vdm

    Deleted g:\475cf70691f8cad655a4e80355955bd3\mpengine.dll

                             Watson Report:         Position:

                    HRESULT: 0x80070490             P1       

             FailedFunction: PackagesNotApplicable  P2       

                  Operation: (null)                 P3       

     SourceComponentVersion: 11.1.4590.0            P4       

        SourceComponentName: mpsigstub.exe          P5       

             ProductVersion: (null)                 P6       

                ProductName: (null)                 P7       

    ERROR 0x80070490 : MpSigStubMain

    End time: 6/15/2014 5:45 PM

    The bolded part in 'PackagesNotApplicable' is saying 'No product found to update' which means the definitions contained in manual update is not applicable to Windows Defender, and thus it will not update and throw 0x80070490 even is Windows Defender is working properly. Further, I found that mpas-feX64.exe is available only for 'Windows Intune', 'System Center' products and 'Forefront Endpoint Protection' which is clearly not your product.

    I'm not saying this is the main problem, inability to update through Windows Update clearly shows some problem with Windows Defender which needs to be solved. You can try clearing the Temp folder as I suggested in the original thread. Remember, you must copy those two log files somewhere.

    Prashant Kumar

    Was this answer helpful?

    0 comments
  4. Anonymous
    2014-06-17T02:34:52+00:00

    I've split your issue from the original question, which was for Windows RT and not 8.x x64.

    It would appear that you have successfully removed the definitions and engine, but the problem with updating continues.

    Your logs show two errors. The first, 0x80070005, means that there is a permissions problem.

    The second, which is listed multiple times, 0x80070490, suggests that Windows Update and/or Defender is corrupt.

    See this KB article:

    http://support.microsoft.com/kb/958044

    Has there ever been any other antivirus installed, even a trial version? Does Windows Update work for other updates?

    -steve

    Was this answer helpful?

    0 comments