This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
I'm seeing a similar problem - last raft of windows updates for my win8.1 x64 machine, everything works fine except the definition update for defender. I've tried downloading the definition update directly and ran the mpas-fex64.exe, which simply returns, no messages, but update still fails. Here's the mpsig* information showing defender's got some dll's out of sync. My guess is this has been failing for awhile. Any way to repair it short of a reinstall?
Command: MpSigStub.exe /program "C:\Windows\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q
Start time: 6/15/2014 5:40 PM (version 11.1.4590.0)
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPASDLTA.VDM (1.175.2352.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPAVDLTA.VDM (1.175.2352.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\NISBASE.VDM (111.0.0.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\GAPAENGINE.DLL (2.1.10502.0)
AM Delta: NIS Full:
Engine: Not included NIS engine: 2.1.10502.0
AS base VDM: Not included NIS base VDM: 111.0.0.0
AV base VDM: Not included NIS full VDM: 111.25.0.0
AS delta VDM: 1.175.2352.0
AV delta VDM: 1.175.2352.0
================================ PatchApplication ================================
Patched nisfull.vdm to 111.25.0.0
================================= MpUpdateEngine =================================
Package files for the engine update:
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPASDLTA.VDM (1.175.2352.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPAVDLTA.VDM (1.175.2352.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\NISBASE.VDM (111.0.0.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\nisfull.vdm (111.25.0.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\GAPAENGINE.DLL (2.1.10502.0)
ERROR 0x800106ba : MpUpdateEngine(C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs)
================================== XcopyDeployment =================================
Using Xcopy location: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates
================================== XcopyForProduct =================================
Copied mpasdlta.vdm
Copied mpavdlta.vdm
Copied gapaengine.dll
Copied nisbase.vdm
Copied nisfull.vdm
================================== ServiceStart ==================================
ERROR 0x80070005 : OpenServiceW
ERROR 0x80070005 : XcopyDeployment
ERROR 0x80070005 : IProduct->UpdateEngine
================================= ValidateUpdate =================================
mpasdlta.vdm version in package is 1.175.2352.0, but after update machine has older version 1.175.417.0
mpavdlta.vdm version in package is 1.175.2352.0, but after update machine has older version 1.175.417.0
Watson Report: Position:
HRESULT: 0x80070005 P1
FailedFunction: MpUpdateEngine P2
Operation: AM Delta P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.5.218.0 P6
ProductName: Windows Defender P7
ERROR 0x800106ba : MpConfigSetValue(DeltaUpdateFailure)
================================= ValidateUpdate =================================
nisfull.vdm version in package is 111.25.0.0, but after update machine has older version 111.19.0.0
Watson Report: Position:
HRESULT: 0x80070005 P1
FailedFunction: MpUpdateEngine P2
Operation: NIS Full P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.5.218.0 P6
ProductName: Windows Defender P7
ERROR 0x80070005 : One or more of the packages found failed to update for Windows Defender.
ERROR 0x80070005 : One or more of the products found failed to update; returning this error
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPASDLTA.VDM
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPAVDLTA.VDM
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\NISBASE.VDM
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\nisfull.vdm
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\GAPAENGINE.DLL
ERROR 0x80070005 : MpSigStubMain
End time: 6/15/2014 5:40 PM
Command: MpSigStub.exe /program "C:\Users\matt\Downloads\mpas-feX64.exe"
Start time: 6/15/2014 5:44 PM (version 11.1.4590.0)
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
g:\59630698aa14776ecf0f\mpasbase.vdm (1.175.0.0)
g:\59630698aa14776ecf0f\mpasdlta.vdm (1.175.2365.0)
g:\59630698aa14776ecf0f\mpengine.dll (1.1.10600.0)
AS FE:
Engine: 1.1.10600.0
AS base VDM: 1.175.0.0
AV base VDM: Not included
AS delta VDM: 1.175.2365.0
AV delta VDM: Not included
=============================== PackagesNotApplicable ==============================
No products found to update.
ERROR 0x80070490 : SearchForApplicableProducts
Deleted g:\59630698aa14776ecf0f\mpasbase.vdm
Deleted g:\59630698aa14776ecf0f\mpasdlta.vdm
Deleted g:\59630698aa14776ecf0f\mpengine.dll
Watson Report: Position:
HRESULT: 0x80070490 P1
FailedFunction: PackagesNotApplicable P2
Operation: (null) P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: (null) P6
ProductName: (null) P7
ERROR 0x80070490 : MpSigStubMain
End time: 6/15/2014 5:44 PM
Command: MpSigStub.exe /program "C:\Users\matt\Downloads\mpas-feX64.exe"
Start time: 6/15/2014 5:44 PM (version 11.1.4590.0)
================================= CacheMpSigStub =================================
Copied MpSigStub.exe to C:\Windows\system32\MpSigStub.exe
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
g:\475cf70691f8cad655a4e80355955bd3\mpasbase.vdm (1.175.0.0)
g:\475cf70691f8cad655a4e80355955bd3\mpasdlta.vdm (1.175.2365.0)
g:\475cf70691f8cad655a4e80355955bd3\mpengine.dll (1.1.10600.0)
AS FE:
Engine: 1.1.10600.0
AS base VDM: 1.175.0.0
AV base VDM: Not included
AS delta VDM: 1.175.2365.0
AV delta VDM: Not included
=============================== PackagesNotApplicable ==============================
No products found to update.
ERROR 0x80070490 : SearchForApplicableProducts
Deleted g:\475cf70691f8cad655a4e80355955bd3\mpasbase.vdm
Deleted g:\475cf70691f8cad655a4e80355955bd3\mpasdlta.vdm
Deleted g:\475cf70691f8cad655a4e80355955bd3\mpengine.dll
Watson Report: Position:
HRESULT: 0x80070490 P1
FailedFunction: PackagesNotApplicable P2
Operation: (null) P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: (null) P6
ProductName: (null) P7
ERROR 0x80070490 : MpSigStubMain
End time: 6/15/2014 5:45 PM
Command: MpSigStub.exe /program mpas-feX64.exe
Start time: 6/15/2014 5:54 PM (version 11.1.4590.0)
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
g:\4ce5e2e04bedb5f9f42e6449d1\mpasbase.vdm (1.175.0.0)
g:\4ce5e2e04bedb5f9f42e6449d1\mpasdlta.vdm (1.175.2365.0)
g:\4ce5e2e04bedb5f9f42e6449d1\mpengine.dll (1.1.10600.0)
AS FE:
Engine: 1.1.10600.0
AS base VDM: 1.175.0.0
AV base VDM: Not included
AS delta VDM: 1.175.2365.0
AV delta VDM: Not included
=============================== PackagesNotApplicable ==============================
No products found to update.
ERROR 0x80070490 : SearchForApplicableProducts
Deleted g:\4ce5e2e04bedb5f9f42e6449d1\mpasbase.vdm
Deleted g:\4ce5e2e04bedb5f9f42e6449d1\mpasdlta.vdm
Deleted g:\4ce5e2e04bedb5f9f42e6449d1\mpengine.dll
Watson Report: Position:
HRESULT: 0x80070490 P1
FailedFunction: PackagesNotApplicable P2
Operation: (null) P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: (null) P6
ProductName: (null) P7
ERROR 0x80070490 : MpSigStubMain
End time: 6/15/2014 5:54 PM
Command: MpSigStub.exe /program mpas-feX64.exe
Start time: 6/15/2014 5:55 PM (version 11.1.4590.0)
================================= CacheMpSigStub =================================
Copied MpSigStub.exe to C:\Windows\system32\MpSigStub.exe
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
g:\4b9a1d7f8d9a34ddc32118c9\mpasbase.vdm (1.175.0.0)
g:\4b9a1d7f8d9a34ddc32118c9\mpasdlta.vdm (1.175.2365.0)
g:\4b9a1d7f8d9a34ddc32118c9\mpengine.dll (1.1.10600.0)
AS FE:
Engine: 1.1.10600.0
AS base VDM: 1.175.0.0
AV base VDM: Not included
AS delta VDM: 1.175.2365.0
AV delta VDM: Not included
=============================== PackagesNotApplicable ==============================
No products found to update.
ERROR 0x80070490 : SearchForApplicableProducts
Deleted g:\4b9a1d7f8d9a34ddc32118c9\mpasbase.vdm
Deleted g:\4b9a1d7f8d9a34ddc32118c9\mpasdlta.vdm
Deleted g:\4b9a1d7f8d9a34ddc32118c9\mpengine.dll
Watson Report: Position:
HRESULT: 0x80070490 P1
FailedFunction: PackagesNotApplicable P2
Operation: (null) P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: (null) P6
ProductName: (null) P7
ERROR 0x80070490 : MpSigStubMain
End time: 6/15/2014 5:55 PM
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
Yes, you can try deleting that file, it'll rebuild, but rename instead of deleting. And you can try changing registry value to MpScanCache-0.bin, instead of MpScanCache-1.bin. Registry Editor will not be able to change the value (permission problems), so you have to open Registry Editor with the method I discussed in answer to this thread:
One more question:
What is the value of SFCState key in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Scan?
Prashant Kumar
Win 8.1 RTM was an image I obtained from my MSDN account and burned to DVD some time ago. It has run, and been updating successfully, for quite awhile now. Is there something you want me to look at on the image to verify its authenticity? I got my O/S key from MSDN as well.
I have never done a refresh or reset. Attempts to do one now, simply get 'refresh failed' with no further information.
I don't recall if the tab was inaccessible during the Beta - I ran the beta for many months, using it every day and I would have noticed if defender had raised its red flag.
Sorry, the original thread had seemingly disappeared so I started a new one. Now, they're merged, thanks.
As far as Updates go, VS Update is not an issue - that's only available in versions of VS starting with VS 2012. This system had VS 2010 on it, and manually installing 2010 SP1 worked fine. VS 2010 SP1 not installing through VS Update is a well known thing, its a very large update and can fail at various points.
I cannot 'offline' install the defender update because the design of that procedure requires the defender service to be running, well, it isn't because the updates are out of date, so it's a chicken/egg thing.
Other updates install successfully, just not defender. For example, KB2969339 installed automatically yesterday (Wednesday), through Windows update.
Did you format the HDD before you installed Win8.1 RTM?
Was Defender's Update tab (and its other tabs, I assume) inaccessible when Win8 was installed? ...after you did the clean install of Win8.1 RTM? ...before you installed KB2939155?
This is a Consumer-specific forum. MSDN subscribers will find appropriate support in the Win8.1 IT Pro forums =>
[http://social.technet.microsoft.com/Forums/windows/en-US/home?category=w8itpro](http://social.technet.microsoft.com/Forums/windows/en-US/home?category=w8itpro)