Yep that worked! Uninstalled the update, and now everything seems to be back to normal. Thanks.
Windows update KB3004394 issues
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous
Windows update KB3004394 causes the following issues on my Windows 7 x64 Ultimate system:
All MMC functions (Event Viewer, etc.) now require Administrator action, although in an Administrator account.
Windows Defender service will not start
The Windows Defender Service Terminated with the following error
%%-2147023113
Removing it returns the system to normal.
Anyone else experience this?
Windows for home | Previous Windows versions | Windows update
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
274 answers
Sort by: Oldest
-
Anonymous
2014-12-10T17:53:24+00:00 -
Anonymous
2014-12-10T17:54:16+00:00 Hang loose guys . Seeing If I can alert someone. In the meantime this is in the optional section of updates.
Root certs are supposed to be silent updates to Windows 7 and not even offered up via Windows update so unless something has changed they shouldn't even be in the WU detection in the first place.
-
Anonymous
2014-12-10T18:07:08+00:00 Got the same problem on two Win7 x64 machines. One client, one server. Defender refuses to start, removing KB3004394 fixed the issue.
-
Anonymous
2014-12-10T18:17:29+00:00 I also have seen this patch cause problems. You can't run magnifier, nor on-screen keyboard on Windows 7 EEnterprise and Home after installing and restarting.
-
Anonymous
2014-12-10T18:18:45+00:00 Hang loose guys . Seeing If I can alert someone. In the meantime this is in the optional section of updates.
Root certs are supposed to be silent updates to Windows 7 and not even offered up via Windows update so unless something has changed they shouldn't even be in the WU detection in the first place.
Hi Susan,
Thanks for looking into this. Re the problematic Win 7 64-bit SP1 Home Premium system, it did recently get cleared of adware infections but is now known to be clean. Process of cleaning was thorough and painstaking, in fact. There are no remnants left over.
Primary issue, from what I can see, is that Windows UAC sees all windows system files as unsigned. Removal of KB3004394 reverts all system files to signed and issues are gone.
From what I understand, this update speeds up the certificate update program from once a week to less than 24 hours, is that correct? So if Microsoft issues new certs they will be installed silently in less than a day? Reason for this is enhanced protection?
Just so you know, this update appeared not in the optional section of WU, but in the main section. It was not offered as an optional update as it normally would.
If optional, I would've declined.
One troubleshooting step not taken would be to disable the Avast! firewall and leave the Windows firewall enabled and then try to install KB3004394. Will report back as I've noted a system slowdown with Avast Internet Security installed; suspect avast is examining some windows system files when they are called and it seems to take some time to clear and proceed.
Last month there was an issue with avast and a WU update and wonder if this is similar. Will report back if any change is seen.