This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
I'm seeing a similar problem - last raft of windows updates for my win8.1 x64 machine, everything works fine except the definition update for defender. I've tried downloading the definition update directly and ran the mpas-fex64.exe, which simply returns, no messages, but update still fails. Here's the mpsig* information showing defender's got some dll's out of sync. My guess is this has been failing for awhile. Any way to repair it short of a reinstall?
Command: MpSigStub.exe /program "C:\Windows\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q
Start time: 6/15/2014 5:40 PM (version 11.1.4590.0)
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPASDLTA.VDM (1.175.2352.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPAVDLTA.VDM (1.175.2352.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\NISBASE.VDM (111.0.0.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\GAPAENGINE.DLL (2.1.10502.0)
AM Delta: NIS Full:
Engine: Not included NIS engine: 2.1.10502.0
AS base VDM: Not included NIS base VDM: 111.0.0.0
AV base VDM: Not included NIS full VDM: 111.25.0.0
AS delta VDM: 1.175.2352.0
AV delta VDM: 1.175.2352.0
================================ PatchApplication ================================
Patched nisfull.vdm to 111.25.0.0
================================= MpUpdateEngine =================================
Package files for the engine update:
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPASDLTA.VDM (1.175.2352.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPAVDLTA.VDM (1.175.2352.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\NISBASE.VDM (111.0.0.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\nisfull.vdm (111.25.0.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\GAPAENGINE.DLL (2.1.10502.0)
ERROR 0x800106ba : MpUpdateEngine(C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs)
================================== XcopyDeployment =================================
Using Xcopy location: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates
================================== XcopyForProduct =================================
Copied mpasdlta.vdm
Copied mpavdlta.vdm
Copied gapaengine.dll
Copied nisbase.vdm
Copied nisfull.vdm
================================== ServiceStart ==================================
ERROR 0x80070005 : OpenServiceW
ERROR 0x80070005 : XcopyDeployment
ERROR 0x80070005 : IProduct->UpdateEngine
================================= ValidateUpdate =================================
mpasdlta.vdm version in package is 1.175.2352.0, but after update machine has older version 1.175.417.0
mpavdlta.vdm version in package is 1.175.2352.0, but after update machine has older version 1.175.417.0
Watson Report: Position:
HRESULT: 0x80070005 P1
FailedFunction: MpUpdateEngine P2
Operation: AM Delta P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.5.218.0 P6
ProductName: Windows Defender P7
ERROR 0x800106ba : MpConfigSetValue(DeltaUpdateFailure)
================================= ValidateUpdate =================================
nisfull.vdm version in package is 111.25.0.0, but after update machine has older version 111.19.0.0
Watson Report: Position:
HRESULT: 0x80070005 P1
FailedFunction: MpUpdateEngine P2
Operation: NIS Full P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.5.218.0 P6
ProductName: Windows Defender P7
ERROR 0x80070005 : One or more of the packages found failed to update for Windows Defender.
ERROR 0x80070005 : One or more of the products found failed to update; returning this error
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPASDLTA.VDM
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPAVDLTA.VDM
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\NISBASE.VDM
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\nisfull.vdm
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\GAPAENGINE.DLL
ERROR 0x80070005 : MpSigStubMain
End time: 6/15/2014 5:40 PM
Command: MpSigStub.exe /program "C:\Users\matt\Downloads\mpas-feX64.exe"
Start time: 6/15/2014 5:44 PM (version 11.1.4590.0)
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
g:\59630698aa14776ecf0f\mpasbase.vdm (1.175.0.0)
g:\59630698aa14776ecf0f\mpasdlta.vdm (1.175.2365.0)
g:\59630698aa14776ecf0f\mpengine.dll (1.1.10600.0)
AS FE:
Engine: 1.1.10600.0
AS base VDM: 1.175.0.0
AV base VDM: Not included
AS delta VDM: 1.175.2365.0
AV delta VDM: Not included
=============================== PackagesNotApplicable ==============================
No products found to update.
ERROR 0x80070490 : SearchForApplicableProducts
Deleted g:\59630698aa14776ecf0f\mpasbase.vdm
Deleted g:\59630698aa14776ecf0f\mpasdlta.vdm
Deleted g:\59630698aa14776ecf0f\mpengine.dll
Watson Report: Position:
HRESULT: 0x80070490 P1
FailedFunction: PackagesNotApplicable P2
Operation: (null) P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: (null) P6
ProductName: (null) P7
ERROR 0x80070490 : MpSigStubMain
End time: 6/15/2014 5:44 PM
Command: MpSigStub.exe /program "C:\Users\matt\Downloads\mpas-feX64.exe"
Start time: 6/15/2014 5:44 PM (version 11.1.4590.0)
================================= CacheMpSigStub =================================
Copied MpSigStub.exe to C:\Windows\system32\MpSigStub.exe
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
g:\475cf70691f8cad655a4e80355955bd3\mpasbase.vdm (1.175.0.0)
g:\475cf70691f8cad655a4e80355955bd3\mpasdlta.vdm (1.175.2365.0)
g:\475cf70691f8cad655a4e80355955bd3\mpengine.dll (1.1.10600.0)
AS FE:
Engine: 1.1.10600.0
AS base VDM: 1.175.0.0
AV base VDM: Not included
AS delta VDM: 1.175.2365.0
AV delta VDM: Not included
=============================== PackagesNotApplicable ==============================
No products found to update.
ERROR 0x80070490 : SearchForApplicableProducts
Deleted g:\475cf70691f8cad655a4e80355955bd3\mpasbase.vdm
Deleted g:\475cf70691f8cad655a4e80355955bd3\mpasdlta.vdm
Deleted g:\475cf70691f8cad655a4e80355955bd3\mpengine.dll
Watson Report: Position:
HRESULT: 0x80070490 P1
FailedFunction: PackagesNotApplicable P2
Operation: (null) P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: (null) P6
ProductName: (null) P7
ERROR 0x80070490 : MpSigStubMain
End time: 6/15/2014 5:45 PM
Command: MpSigStub.exe /program mpas-feX64.exe
Start time: 6/15/2014 5:54 PM (version 11.1.4590.0)
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
g:\4ce5e2e04bedb5f9f42e6449d1\mpasbase.vdm (1.175.0.0)
g:\4ce5e2e04bedb5f9f42e6449d1\mpasdlta.vdm (1.175.2365.0)
g:\4ce5e2e04bedb5f9f42e6449d1\mpengine.dll (1.1.10600.0)
AS FE:
Engine: 1.1.10600.0
AS base VDM: 1.175.0.0
AV base VDM: Not included
AS delta VDM: 1.175.2365.0
AV delta VDM: Not included
=============================== PackagesNotApplicable ==============================
No products found to update.
ERROR 0x80070490 : SearchForApplicableProducts
Deleted g:\4ce5e2e04bedb5f9f42e6449d1\mpasbase.vdm
Deleted g:\4ce5e2e04bedb5f9f42e6449d1\mpasdlta.vdm
Deleted g:\4ce5e2e04bedb5f9f42e6449d1\mpengine.dll
Watson Report: Position:
HRESULT: 0x80070490 P1
FailedFunction: PackagesNotApplicable P2
Operation: (null) P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: (null) P6
ProductName: (null) P7
ERROR 0x80070490 : MpSigStubMain
End time: 6/15/2014 5:54 PM
Command: MpSigStub.exe /program mpas-feX64.exe
Start time: 6/15/2014 5:55 PM (version 11.1.4590.0)
================================= CacheMpSigStub =================================
Copied MpSigStub.exe to C:\Windows\system32\MpSigStub.exe
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
g:\4b9a1d7f8d9a34ddc32118c9\mpasbase.vdm (1.175.0.0)
g:\4b9a1d7f8d9a34ddc32118c9\mpasdlta.vdm (1.175.2365.0)
g:\4b9a1d7f8d9a34ddc32118c9\mpengine.dll (1.1.10600.0)
AS FE:
Engine: 1.1.10600.0
AS base VDM: 1.175.0.0
AV base VDM: Not included
AS delta VDM: 1.175.2365.0
AV delta VDM: Not included
=============================== PackagesNotApplicable ==============================
No products found to update.
ERROR 0x80070490 : SearchForApplicableProducts
Deleted g:\4b9a1d7f8d9a34ddc32118c9\mpasbase.vdm
Deleted g:\4b9a1d7f8d9a34ddc32118c9\mpasdlta.vdm
Deleted g:\4b9a1d7f8d9a34ddc32118c9\mpengine.dll
Watson Report: Position:
HRESULT: 0x80070490 P1
FailedFunction: PackagesNotApplicable P2
Operation: (null) P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: (null) P6
ProductName: (null) P7
ERROR 0x80070490 : MpSigStubMain
End time: 6/15/2014 5:55 PM
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
Yes, you can try deleting that file, it'll rebuild, but rename instead of deleting. And you can try changing registry value to MpScanCache-0.bin, instead of MpScanCache-1.bin. Registry Editor will not be able to change the value (permission problems), so you have to open Registry Editor with the method I discussed in answer to this thread:
One more question:
What is the value of SFCState key in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Scan?
Prashant Kumar
Have you tried clearing TEMP method as discussed in this thread:
http://answers.microsoft.com/thread/8921304f-b710-4180-91e4-44f38b3a819e
If you don't understand the method discussed then ask, I'll explain it.
Prashant Kumar
Should I try removing some of the updates installed on 6/11 and see if I can start defender again and apply the latest updates?
It's your computer, you can do what you want. But I'll tell you that the computer should NOT be connected to the internet if the Jun-14 security updates are not installed.
Those updates are installed - except for the Defender update. Note that I've had subsequent windows updates installed, including one that just came out on the 25th. The problem is entirely with defender and its inability to update. I did try running mpcmdrun -signatureupdate as administrator, which failed. Here's the log entry (yes, it was about 1/2 hour to download, then fail, but there's a new error code):
Start: MpSignatureUpdate()
Update started
Search Started (HTTP) (Path: http://go.microsoft.com/fwlink/?LinkID=121721&clcid=0x409&arch=x64&eng=0.0.0.0&asdelta=0.0.0.0&prod=77BDAF73-B396-481F-9042-AD358843EC24)...
Download Started...
Time Info - Tue Jul 01 2014 22:08:33 Download Completed
Installation Started...
Time Info - Tue Jul 01 2014 22:09:11 Update failed with hr: 0x80070005
Installation Completed
Search Started (HTTP) (Path: http://go.microsoft.com/fwlink/?LinkID=260974&clcid=0x409&NRI=true&arch=x64&eng=0.0.0.0&sig=0.0.0.0&prod=77BDAF73-B396-481F-9042-AD358843EC24)...
Download Started...
Download Completed
Installation Started...
Update failed with hr: 0x80070005
Installation Completed
Update completed with hr: 0x800106ba
ERROR: Signature Update failed with hr=800106BA
MpCmdRun: End Time: Tue Jul 01 2014 22:09:18
Should I try removing some of the updates installed on 6/11 and see if I can start defender again and apply the latest updates?
It's your computer, you can do what you want. But I'll tell you that the computer should NOT be connected to the internet if the Jun-14 security updates are not installed.
I've tried refreshing twice - each time, the process runs to the end and then gives the unhelpful 'refresh failed.' Is there a log somewhere as to why it failed? Otherwise, based on your recommendation I'm down to having to reinstall completely from scratch, and there's no guarantee that the problem won't reemerge down the road.
As for 6/11 updates causing the problem, that could have been the case but It's my 'feeling' that the problem was prior to then, sorry don't have anything more concrete than that. Should I try removing some of the updates installed on 6/11 and see if I can start defender again and apply the latest updates?
