Definition Update for Windows Defender - KB2267602 (Definition 1.213.5087.0) - Error 0x80070643

Anonymous

This worked for me: Run gpedit.msc if on Pro version, sort by path and look for Windows Defender. Go through and change from "Not Configured" to "Disabled". In the second highlighted box, you'll want to "Enable". You'll notice the underlined red setting:

Specify the day of the week to check for definition updates. "Enabled" and change to "Never"

Reboot your machine and you should be good to go, this only works on the Pro version though. You have to reboot as any attempting download will continue until you do so, even though it is disabled.

When you open "Settings/Update & Security" you should see this:

"Some Settings are managed by your organization" in red which reflects what you just did in group policy. All defender options are grayed out and inaccessible.

If you ever want to re-enable Windows Defender, repeat the process in reverse, changing "Disabled" to "Not Configured" in the first yellow box and "Enabled" to "Not Configured" in the second yellow box.

0 comments

Anonymous

For weeks now keep getting the message:

"Definition Update for Windows Defender - KB2267602 (Definition 1.213.5087.0) - Error 0x80070643"

While the computer seems to run ok, in the mean time I cannot update windows 10...

Yes, ME TOO!!! I have NIS and it takes over the role of win def. Like everything else with windows and ms in general: THIS IS OUR OS AND IF YOU HAVE ANY TROUBLE WITH OUR DS TECHS---T. S.!! It would be easy for them to allow US, THE DUMB F!!!!!!'S THAT KEEP MS "ALIVE" AND "EMPLOYED" AND MILLIONAIRES, TO SIMPLY "HIDE THE G D UPDATE----BUTT---NO......let's act like "idiots" and "ignore " the SIMPLE WAY TO CORRECT THIS DUMB **** PROBLEM!!!

So now we will ALL HOLD OUR BREATH(NOT) FOR A "SOLUTION" RATHER THAN A BS, NON-PROBLEM-SOLVING REPLY!!!

I am having very similar problem - have 3 PC's with W10 - all using Windows Defender.

2 desktops OK but Laptop (which is an upgrade from W7 via MS rather than a new installation.

Was OK but twice a day now automatic update always fails as above.

Ordinary W10 updates, including reboot, always seem fine,

Updating Windows Defender directly occasionally works BUT most times fails with a window saying it did not update due to a network or internet connectivity problem.

Updating WD by downloading the latest signature update and then running that always seems to work and when updated the Windows Update does not fail - as now 'up to date'

So far cannot find anyway of curing this!

I have given up with this as cannot afford to waste so much time and put security @ risk!

Have installed Avast until I see something sensible to 'fix' (and that works) this problem

0 comments

Anonymous

@mtcdnp -

To manually download latest signatures try executing the following command : "%programfiles%\windows defender\mpcmdrun.exe" -signatureupdate -http

The error you are seeing is a generic Error_Install_failed code. Can you access the following file (\windows\temp\mpsigstub.log) and post the entry with the error code. I'd like to see were the error occurs.

Thx,

CJ.Eichholz (MSFT) - Microsoft Antimalware

CyberDust: +msft_cjeichholz

Twitter : @msft_cjeichholz

This post is provided as-is with no warranty or support.

Here is the MpSigStub.log

"----------------------------------------------------------------------------------

Command: MpSigStub.exe /program "C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q

Start time: 3/19/2016 4:56 PM (version 11.1.5276.0)

=================================== ProductSearch ==================================

Windows Defender:

Status: Active

Product: 4.9.10586.0

Engine: 1.1.12505.0

Signatures: 1.215.871.0

NIS Engine: 2.1.11804.0

NIS Signatures: 115.40.0.0

================================ PackageDiscovery ================================

Package files discovered:

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPASDLTA.VDM (1.215.2348.0)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPAVDLTA.VDM (1.215.2348.0)

AM Delta: NIS Delta:

Engine: Not included NIS engine: Not included

AS base VDM: Not included NIS base VDM: Not included

AV base VDM: Not included NIS full VDM: 115.42.0.0

AS delta VDM: 1.215.2348.0

AV delta VDM: 1.215.2348.0

================================ PatchApplication ================================

Patched nisfull.vdm to 115.42.0.0

================================= MpUpdateEngine =================================

Package files for the engine update:

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPASDLTA.VDM (1.215.2348.0)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPAVDLTA.VDM (1.215.2348.0)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\nisfull.vdm (115.42.0.0)

ERROR 0x80509004 : MpUpdateEngine(C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs)

ERROR 0x80509004 : IProduct->UpdateEngine

================================= ValidateUpdate =================================

mpasdlta.vdm version in package is 1.215.2348.0, but after update machine has older version 1.215.871.0

mpavdlta.vdm version in package is 1.215.2348.0, but after update machine has older version 1.215.871.0

Watson Report: Position:

HRESULT: 0x80509004 P1

FailedFunction: MpUpdateEngine P2

Operation: AM Delta P3

SourceComponentVersion: 11.1.5276.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: 4.9.10586.0 P6

ProductName: Windows Defender P7

ERROR 0x800106b5 : Failed to send error Heartbeat report for product: Windows Defender

ERROR 0x800106b5 : MpConfigSetValue(DeltaUpdateFailure)

================================= ValidateUpdate =================================

nisfull.vdm version in package is 115.42.0.0, but after update machine has older version 115.40.0.0

Watson Report: Position:

HRESULT: 0x80509004 P1

FailedFunction: MpUpdateEngine P2

Operation: NIS Delta P3

SourceComponentVersion: 11.1.5276.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: 4.9.10586.0 P6

ProductName: Windows Defender P7

ERROR 0x800106b5 : Failed to send error Heartbeat report for product: Windows Defender

ERROR 0x800106b5 : MpConfigSetValue(NISDeltaUpdateFailure)

ERROR 0x80509004 : One or more of the packages found failed to update for Windows Defender.

ERROR 0x80509004 : One or more of the products found failed to update; returning this error

Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P

ERROR 0x80509004 : MpSigStubMain

End time: 3/19/2016 4:58 PM

Command: MpSigStub.exe /program "C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q

Start time: 3/20/2016 11:36 AM (version 11.1.5276.0)

=================================== ProductSearch ==================================

Windows Defender:

Status: Active

Product: 4.9.10586.0

Engine: 1.1.12505.0

Signatures: 1.215.871.0

NIS Engine: 2.1.11804.0

NIS Signatures: 115.40.0.0

================================ PackageDiscovery ================================

Package files discovered:

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPASDLTA.VDM (1.215.2410.0)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPAVDLTA.VDM (1.215.2410.0)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\NISBASE.VDM (115.0.0.0)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\GAPAENGINE.DLL (2.1.11804.0)

AM Delta: NIS Full:

Engine: Not included NIS engine: 2.1.11804.0

AS base VDM: Not included NIS base VDM: 115.0.0.0

AV base VDM: Not included NIS full VDM: 115.42.0.0

AS delta VDM: 1.215.2410.0

AV delta VDM: 1.215.2410.0

================================ PatchApplication ================================

Patched nisfull.vdm to 115.42.0.0

================================= MpUpdateEngine =================================

Package files for the engine update:

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPASDLTA.VDM (1.215.2410.0)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPAVDLTA.VDM (1.215.2410.0)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\NISBASE.VDM (115.0.0.0)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\nisfull.vdm (115.42.0.0)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\GAPAENGINE.DLL (2.1.11804.0)

ERROR 0x800106ba : MpUpdateEngine(C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs)

================================== XcopyDeployment =================================

Using Xcopy location: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates

================================== XcopyForProduct =================================

Copied mpasdlta.vdm

Copied mpavdlta.vdm

Copied gapaengine.dll

Copied nisbase.vdm

Copied nisfull.vdm

================================== ServiceStart ==================================

ERROR 0x80070005 : OpenServiceW

ERROR 0x80070005 : XcopyDeployment

ERROR 0x80070005 : IProduct->UpdateEngine

================================= ValidateUpdate =================================

mpasdlta.vdm version in package is 1.215.2410.0, but after update machine has older version 1.215.871.0

mpavdlta.vdm version in package is 1.215.2410.0, but after update machine has older version 1.215.871.0

Watson Report: Position:

HRESULT: 0x80070005 P1

FailedFunction: MpUpdateEngine P2

Operation: AM Delta P3

SourceComponentVersion: 11.1.5276.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: 4.9.10586.0 P6

ProductName: Windows Defender P7

ERROR 0x800106ba : Failed to send error Heartbeat report for product: Windows Defender

ERROR 0x800106ba : MpConfigSetValue(DeltaUpdateFailure)

================================= ValidateUpdate =================================

nisfull.vdm version in package is 115.42.0.0, but after update machine has older version 115.40.0.0

Watson Report: Position:

HRESULT: 0x80070005 P1

FailedFunction: MpUpdateEngine P2

Operation: NIS Full P3

SourceComponentVersion: 11.1.5276.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: 4.9.10586.0 P6

ProductName: Windows Defender P7

ERROR 0x800106ba : Failed to send error Heartbeat report for product: Windows Defender

ERROR 0x80070005 : One or more of the packages found failed to update for Windows Defender.

ERROR 0x80070005 : One or more of the products found failed to update; returning this error

Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P

Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPASDLTA.VDM

Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPAVDLTA.VDM

Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\NISBASE.VDM

Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\nisfull.vdm

Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\GAPAENGINE.DLL

ERROR 0x80070005 : MpSigStubMain

End time: 3/20/2016 11:36 AM

Command: MpSigStub.exe /program "C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q

Start time: 3/21/2016 10:45 AM (version 11.1.5276.0)

=================================== ProductSearch ==================================

Windows Defender:

Status: Active

Product: 4.9.10586.0

Engine: 1.1.12505.0

Signatures: 1.215.871.0

NIS Engine: 2.1.11804.0

NIS Signatures: 115.40.0.0

================================ PackageDiscovery ================================

Package files discovered:

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPASDLTA.VDM (1.215.2488.0)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPAVDLTA.VDM (1.215.2488.0)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\NISBASE.VDM (115.0.0.0)

C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\GAPAENGINE.DLL (2.1.11804.0)

AM Delta: NIS Full:

Engine: Not included NIS engine: 2.1.11804.0

AS base VDM: Not included NIS base VDM: 115.0.0.0

AV base VDM: Not included NIS full VDM: 115.42.0.0

AS delta VDM: 1.215.2488.0

AV delta VDM: 1.215.2488.0