@mtcdnp -
To manually download latest signatures try executing the following command : "%programfiles%\windows defender\mpcmdrun.exe" -signatureupdate -http
The error you are seeing is a generic Error_Install_failed code. Can you access the following file (\windows\temp\mpsigstub.log) and post the entry with the error code. I'd like to see were the error occurs.
Thx,
CJ.Eichholz (MSFT) - Microsoft Antimalware
CyberDust:
+msft_cjeichholz
Twitter :
@msft_cjeichholz
This post is provided as-is with no warranty or support.
Here is the MpSigStub.log
"----------------------------------------------------------------------------------
Command: MpSigStub.exe /program "C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q
Start time: 3/19/2016 4:56 PM (version 11.1.5276.0)
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.9.10586.0
Engine: 1.1.12505.0
Signatures: 1.215.871.0
NIS Engine: 2.1.11804.0
NIS Signatures: 115.40.0.0
================================ PackageDiscovery ================================
Package files discovered:
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPASDLTA.VDM (1.215.2348.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPAVDLTA.VDM (1.215.2348.0)
AM Delta: NIS Delta:
Engine: Not included NIS engine: Not included
AS base VDM: Not included NIS base VDM: Not included
AV base VDM: Not included NIS full VDM: 115.42.0.0
AS delta VDM: 1.215.2348.0
AV delta VDM: 1.215.2348.0
================================ PatchApplication ================================
Patched nisfull.vdm to 115.42.0.0
================================= MpUpdateEngine =================================
Package files for the engine update:
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPASDLTA.VDM (1.215.2348.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPAVDLTA.VDM (1.215.2348.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\nisfull.vdm (115.42.0.0)
ERROR 0x80509004 : MpUpdateEngine(C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs)
ERROR 0x80509004 : IProduct->UpdateEngine
================================= ValidateUpdate =================================
mpasdlta.vdm version in package is 1.215.2348.0, but after update machine has older version 1.215.871.0
mpavdlta.vdm version in package is 1.215.2348.0, but after update machine has older version 1.215.871.0
Watson Report: Position:
HRESULT: 0x80509004 P1
FailedFunction: MpUpdateEngine P2
Operation: AM Delta P3
SourceComponentVersion: 11.1.5276.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.9.10586.0 P6
ProductName: Windows Defender P7
ERROR 0x800106b5 : Failed to send error Heartbeat report for product: Windows Defender
ERROR 0x800106b5 : MpConfigSetValue(DeltaUpdateFailure)
================================= ValidateUpdate =================================
nisfull.vdm version in package is 115.42.0.0, but after update machine has older version 115.40.0.0
Watson Report: Position:
HRESULT: 0x80509004 P1
FailedFunction: MpUpdateEngine P2
Operation: NIS Delta P3
SourceComponentVersion: 11.1.5276.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.9.10586.0 P6
ProductName: Windows Defender P7
ERROR 0x800106b5 : Failed to send error Heartbeat report for product: Windows Defender
ERROR 0x800106b5 : MpConfigSetValue(NISDeltaUpdateFailure)
ERROR 0x80509004 : One or more of the packages found failed to update for Windows Defender.
ERROR 0x80509004 : One or more of the products found failed to update; returning this error
Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P
ERROR 0x80509004 : MpSigStubMain
End time: 3/19/2016 4:58 PM
Command: MpSigStub.exe /program "C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q
Start time: 3/20/2016 11:36 AM (version 11.1.5276.0)
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.9.10586.0
Engine: 1.1.12505.0
Signatures: 1.215.871.0
NIS Engine: 2.1.11804.0
NIS Signatures: 115.40.0.0
================================ PackageDiscovery ================================
Package files discovered:
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPASDLTA.VDM (1.215.2410.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPAVDLTA.VDM (1.215.2410.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\NISBASE.VDM (115.0.0.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\GAPAENGINE.DLL (2.1.11804.0)
AM Delta: NIS Full:
Engine: Not included NIS engine: 2.1.11804.0
AS base VDM: Not included NIS base VDM: 115.0.0.0
AV base VDM: Not included NIS full VDM: 115.42.0.0
AS delta VDM: 1.215.2410.0
AV delta VDM: 1.215.2410.0
================================ PatchApplication ================================
Patched nisfull.vdm to 115.42.0.0
================================= MpUpdateEngine =================================
Package files for the engine update:
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPASDLTA.VDM (1.215.2410.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPAVDLTA.VDM (1.215.2410.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\NISBASE.VDM (115.0.0.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\nisfull.vdm (115.42.0.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\GAPAENGINE.DLL (2.1.11804.0)
ERROR 0x800106ba : MpUpdateEngine(C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs)
================================== XcopyDeployment =================================
Using Xcopy location: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates
================================== XcopyForProduct =================================
Copied mpasdlta.vdm
Copied mpavdlta.vdm
Copied gapaengine.dll
Copied nisbase.vdm
Copied nisfull.vdm
================================== ServiceStart ==================================
ERROR 0x80070005 : OpenServiceW
ERROR 0x80070005 : XcopyDeployment
ERROR 0x80070005 : IProduct->UpdateEngine
================================= ValidateUpdate =================================
mpasdlta.vdm version in package is 1.215.2410.0, but after update machine has older version 1.215.871.0
mpavdlta.vdm version in package is 1.215.2410.0, but after update machine has older version 1.215.871.0
Watson Report: Position:
HRESULT: 0x80070005 P1
FailedFunction: MpUpdateEngine P2
Operation: AM Delta P3
SourceComponentVersion: 11.1.5276.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.9.10586.0 P6
ProductName: Windows Defender P7
ERROR 0x800106ba : Failed to send error Heartbeat report for product: Windows Defender
ERROR 0x800106ba : MpConfigSetValue(DeltaUpdateFailure)
================================= ValidateUpdate =================================
nisfull.vdm version in package is 115.42.0.0, but after update machine has older version 115.40.0.0
Watson Report: Position:
HRESULT: 0x80070005 P1
FailedFunction: MpUpdateEngine P2
Operation: NIS Full P3
SourceComponentVersion: 11.1.5276.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.9.10586.0 P6
ProductName: Windows Defender P7
ERROR 0x800106ba : Failed to send error Heartbeat report for product: Windows Defender
ERROR 0x80070005 : One or more of the packages found failed to update for Windows Defender.
ERROR 0x80070005 : One or more of the products found failed to update; returning this error
Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P
Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPASDLTA.VDM
Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPAVDLTA.VDM
Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\NISBASE.VDM
Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\nisfull.vdm
Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\GAPAENGINE.DLL
ERROR 0x80070005 : MpSigStubMain
End time: 3/20/2016 11:36 AM
Command: MpSigStub.exe /program "C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q
Start time: 3/21/2016 10:45 AM (version 11.1.5276.0)
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.9.10586.0
Engine: 1.1.12505.0
Signatures: 1.215.871.0
NIS Engine: 2.1.11804.0
NIS Signatures: 115.40.0.0
================================ PackageDiscovery ================================
Package files discovered:
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPASDLTA.VDM (1.215.2488.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPAVDLTA.VDM (1.215.2488.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\NISBASE.VDM (115.0.0.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\GAPAENGINE.DLL (2.1.11804.0)
AM Delta: NIS Full:
Engine: Not included NIS engine: 2.1.11804.0
AS base VDM: Not included NIS base VDM: 115.0.0.0
AV base VDM: Not included NIS full VDM: 115.42.0.0
AS delta VDM: 1.215.2488.0
AV delta VDM: 1.215.2488.0
================================ PatchApplication ================================
Patched nisfull.vdm to 115.42.0.0
================================= MpUpdateEngine =================================
Package files for the engine update:
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPASDLTA.VDM (1.215.2488.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPAVDLTA.VDM (1.215.2488.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\NISBASE.VDM (115.0.0.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\nisfull.vdm (115.42.0.0)
C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\GAPAENGINE.DLL (2.1.11804.0)
ERROR 0x800106ba : MpUpdateEngine(C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs)
================================== XcopyDeployment =================================
Using Xcopy location: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates
================================== XcopyForProduct =================================
Copied mpasdlta.vdm
Copied mpavdlta.vdm
Copied gapaengine.dll
Copied nisbase.vdm
Copied nisfull.vdm
================================== ServiceStart ==================================
ERROR 0x80070005 : OpenServiceW
ERROR 0x80070005 : XcopyDeployment
ERROR 0x80070005 : IProduct->UpdateEngine
================================= ValidateUpdate =================================
mpasdlta.vdm version in package is 1.215.2488.0, but after update machine has older version 1.215.871.0
mpavdlta.vdm version in package is 1.215.2488.0, but after update machine has older version 1.215.871.0
Watson Report: Position:
HRESULT: 0x80070005 P1
FailedFunction: MpUpdateEngine P2
Operation: AM Delta P3
SourceComponentVersion: 11.1.5276.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.9.10586.0 P6
ProductName: Windows Defender P7
ERROR 0x800106ba : Failed to send error Heartbeat report for product: Windows Defender
ERROR 0x800106ba : MpConfigSetValue(DeltaUpdateFailure)
================================= ValidateUpdate =================================
nisfull.vdm version in package is 115.42.0.0, but after update machine has older version 115.40.0.0
Watson Report: Position:
HRESULT: 0x80070005 P1
FailedFunction: MpUpdateEngine P2
Operation: NIS Full P3
SourceComponentVersion: 11.1.5276.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.9.10586.0 P6
ProductName: Windows Defender P7
ERROR 0x800106ba : Failed to send error Heartbeat report for product: Windows Defender
ERROR 0x80070005 : One or more of the packages found failed to update for Windows Defender.
ERROR 0x80070005 : One or more of the products found failed to update; returning this error
Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\115.0.0.0_TO_115.42.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P
Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPASDLTA.VDM
Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\MPAVDLTA.VDM
Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\NISBASE.VDM
Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\nisfull.vdm
Deleted C:\WINDOWS\Temp\D0585148C703F3D468F1DC9B543C3787-Sigs\GAPAENGINE.DLL
ERROR 0x80070005 : MpSigStubMain
End time: 3/21/2016 10:45 AM
----------------------------------------------------------------------------------"