Windows Defender Offline on Windows 7 machines DEFINITIONS OUT OF DATE

Anonymous
2017-05-31T08:59:20+00:00

Windows Defender Offline has stopped recognizing UPDATED Definitions on W7 machines,  Again.

Immediately after updating the Media USB, using the MSSSTOOL, attempts to boot from the USB fail,

indicating that the Definitions are out of date. On both 32bit and 64bit machines.

 This same failure occurred in 2016, on multitudes of W7 machines, between January and July.

Microsoft eventually fixed it by releasing a new version of the MSSSTOOL. 4.9.0221.0  (872kb).

The failure with WDO on W7 machines in 2016 began to occur shortly after problems showed up in

Windows Defender on W10 machines, and was probably the result of fixing the W10 machines.

We may now have the same thing occurring again. After the CREATOR update to W10, it appears they

are having problems with WDO.   And now WDO is broken for W7 machines.

MICROSOFT, if you have modified the configuration of the definitions or the WDO program data in an

effort to repair the problems in W10 machines, please release an updated version of the MSSSTOOL

that will allow W7 machines to accommodate those changes.    Thanks,  Glen

Windows for home | Previous Windows versions | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
Answer accepted by question author
Anonymous
2017-08-20T01:47:10+00:00

GREAT NEWS !

Windows Defender Offline is working once again on Windows 7 machines.

There has been a change made to the Windows Defender Offline Program.

It no longer updates definitions before running.

In order to take advantage of this FIX, it will be necessary to format your

USB before you run the mssstool. This will ensure that a fresh copy of the

Program is installed on the USB.

Don't know why we were not notified!  I just happened to discover this change,

while examining a WDO problem on Windows 10. There, it is possible track

the operation, using the Event Viewer. I couldn't believe my eyes.

Happy Scanning,  Glen

Was this answer helpful?

2 people found this answer helpful.
0 comments No comments

41 additional answers

Sort by: Most helpful
  1. Anonymous
    2017-06-21T16:08:58+00:00

    I am also getting this error on two different machines. Could it be a firewall issue? If so, I'm curious why Microsoft Endpoint Protection could be blocking a Microsoft service.

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2017-06-16T00:28:38+00:00

    I don't know if this is a good sign or not, but the MSSSTOOL will not connect to download updated

    definitions. The response is, "check your internet connection". Of course the internet is working fine.

    Hopefully, there is activity on Microsoft's end, to fix our problem.

    In case they aren't;   Of the FIVE Windows 7 machines that I have access to, ONE of them WILL download

    definitions and scan.  DELL 8300 P4 using ethernet. The other four will NOT. Two of which also use an ethernet connection.

    It is accomplished in a roundabout fashion. And certainly not as WDO for W7 was designed.

    Maybe this will work on other old computers if you have a need.          Any port in the storm!

    Boot from your media USB to load WDO.    It will give you the red "def out of date" screen.

    Click on "Update Definitions" .   Definitions will download, but give a connection failed message.

    If the popup appears that indicates that it has failed, just X it off.

    Be patient, "Up To Date" may appear. If it doesn't, click the grey button until it does. Maybe twice.

    Once you see "Up To Date", if you click the "HOME" tab, you will be able scan your machine.

    I don't how the old machines attach to the internet without software, but this one does.

    Be advised the updated definitions did not go onto the USB, but into the loaded WDO program.

    Looks to me like Windows 10 fingerprints are all over this.

    regards,  Glen

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2017-06-04T21:29:37+00:00

    This is a an addendum to my previous post:

    The Defender Offline program in Windows 10 uses the same definitions that WDO uses for Windows 7

    machines. The latest definitions for both have the same version number. They are provided to W10

    directly to the machine, probably through Windows update. The are provided to W7 machines from an

    updated Media USB. Created by using the MSSSTOOL, which gets them from the internet.

    Consider this: If there was a change made in the configuration or format of the definitions in response

    to a major change in W10, say 1703; then those changes would be accommodated by W10 Defender or

    it would be updated to do so. However, those same definitions would not be compatible with WDO in

    Windows 7 machines unless there was similar change made to WDO. Vis-a-vis the MSSSTOOL. Since it

    is what produces the WDO program on the Media USB.

     The only source for relief from this, or any other incompatibility would be the MSSSTOOL.

    Sorry to see so little interest in this problem. However, in 2016 this problem was first observed in January,

    but was not actively addressed until April.  It was finally resolved June 29 when the new MSSSTOOL was

    released. WDO is not something we frequently use, but when you need it, YOU NEED IT !

      Regards, Glen

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2017-06-04T09:31:35+00:00

    With respect, Windows Defender Offline, as it applies to Windows 7 is not misnamed.

    WDO definitions are updated for a Windows 7 machine that is online, using the MSSSTOOL. The Tool

    loads the definitions and the WDO program onto the Media USB. This USB is created to be bootable.

    When the machine is booted from this USB, there is no internet connection software included. It is not

    needed. It is already updated, and its function is to scan the system offline, without any of the system

    program being loaded.

    Failure to connect to the internet at this time is a red herring. W10 Defender Offline cannot connect

    to the internet either while it is active. Same error code 0x80072EE7. (At least when CEIP is disabled)

    We both know that the definitions are in fact up to date when the program says they are not. This is

    the real problem! And it occurred in 2016 as well. And was fixed by updating the MSSSTOOL to version

    4.9.0221.0.  Do you have any means to find out what change was involved on version 4.9.0221.0 ?

    Was this answer helpful?

    0 comments No comments