Windows Defender not updating through Windows Updates

DR.M

Malware Specialist
Joined
Sep 4, 2019
Messages
2,354
It was expected to be clean. It happens sometimes some items to lose their digital signature. Resetting them (or replacing them) fixes the issue. Running the reg files, I believe will fix them.
 

Cookiegal

Karen
Thread Starter
Administrator
Malware Specialist Coordinator
Joined
Aug 27, 2003
Messages
121,910
It was expected to be clean.
Yes, I expected it too but thought it can't hurt to check just in case.

I've run the other two and there's no change.

Farbar Service Scanner Version: 23-12-2020
Ran by Cookie (administrator) on 28-10-2021 at 10:02:22
Running from "C:\Users\Cookie\Desktop"
Microsoft Windows 8.1 Pro (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Policy:
========================


Action Center:
============

wscsvc Service is not running. Checking service configuration:
The start type of wscsvc service is OK.
The ImagePath of wscsvc service is OK.
The ServiceDll of wscsvc service is OK.


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============

Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\Drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcsvc.dll => File is digitally signed
C:\Windows\System32\Drivers\afd.sys => File is digitally signed
C:\Windows\System32\Drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\Drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\wscsvc.dll
[2016-02-27 09:46] - [2016-01-06 12:47] - 0146944 ____A (Microsoft Corporation) 501D5EFAB9711039479AE48401386D2B

C:\Windows\System32\wbem\WMIsvc.dll
[2020-08-12 08:27] - [2020-07-10 13:58] - 0231936 ____A (Microsoft Corporation) 80644B29E2B93A2967E72A3E0E948EA3

C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****
 

DR.M

Malware Specialist
Joined
Sep 4, 2019
Messages
2,354
Karen,

Let's see what the Tweaking.com can do for that. I use to leave it at the end and most of the times it does the job regarding this kind of problems.

Tweaking.com - Windows Repair Free Portable
  • Download Tweaking.com - Windows Repair Free Portable from here: Tweaking.com - Windows Repair Free/Pro
  • Save the zip file on your Desktop.
  • Extract the content of the file on the Desktop.
  • Open the extracted folder, find Repair_Windows.exe and double click to run the program.
  • Accept the terms of use.
  • Jump to Repairs.
  • Open Repairs.
  • Make sure to put a tick next to these repairs: 1, 3, 5, 25
  • Start Repairs.
  • The computer may need to restart. If not, restart it.
After that, let's see another FSS log.
 

Cookiegal

Karen
Thread Starter
Administrator
Malware Specialist Coordinator
Joined
Aug 27, 2003
Messages
121,910
I'm not crazy about using that program to be honest. I would prefer fixes from within Windows or using commands to replace those files if possible although I'm not sure I have any viable copies of them. I was thinking of running DISM but I've never done that before.
 

DR.M

Malware Specialist
Joined
Sep 4, 2019
Messages
2,354
Tweaking.com is a powerful tool we use, and as I said many times it effectively solves many related problems.

Not sure if DISM/SFC can solve the issue here, but you can try.

Run Deployment Image Servicing and Management (DISM)
  • Click on the Start button and in the search box, type Command Prompt
  • When you see Command Prompt on the list, right-click on it and select Run as administrator
  • Enter the command below and press on Enter;
Code:
DISM /Online /Cleanup-Image /RestoreHealth
  • Let the scan run until the end (100%). Depending on your system, it can take some time.
  • What is the result you got?

When DISM finishes, you can then run SFC from the same command prompt window, but full instructions as if starting fresh:
  • Click on the Start button and in the search box, type Command Prompt
  • When you see Command Prompt on the list, right-click on it and select Run as administrator
  • Enter the command below and press on Enter
Code:
sfc /scannow
  • Let the scan finish.
  • You will normally get one of the following results:
    Code:
    Windows Resource Protection did not find any integrity violations
    Windows Resource Protection found corrupt files and successfully repaired them
    Windows Resource Protection found corrupt files but was unable to fix some of them
    Windows Resource Protection could not perform the requested operation
  • What is the result you got?
 

Cookiegal

Karen
Thread Starter
Administrator
Malware Specialist Coordinator
Joined
Aug 27, 2003
Messages
121,910
Thanks. I'll get to it as soon as I can. :)
 

Cookiegal

Karen
Thread Starter
Administrator
Malware Specialist Coordinator
Joined
Aug 27, 2003
Messages
121,910
I'm going to wait another day or two before doing anything else. Windows Updates worked this morning and I had left the setting on install automatically so that's what happened. I will change it back to notify me and see if that still works.

As for the two unsigned files, it seems to be normal as not all MS files are signed. It could be specific to the OS and/or the date of installation. I had a Moderator check on his Windows 8.1 Pro and both of those files are unsigned as well.

Thanks for your help with this Panos. :)
 

DR.M

Malware Specialist
Joined
Sep 4, 2019
Messages
2,354
Windows Updates worked this morning and I had left the setting on install automatically so that's what happened. I will change it back to notify me and see if that still works.
It will work. :)

As for the two files, I'll search about them a bit more.

Thanks for your help with this Panos.
You helped too. (y)
 

Cookiegal

Karen
Thread Starter
Administrator
Malware Specialist Coordinator
Joined
Aug 27, 2003
Messages
121,910
There are still some odd things in the Event Viewer regarding Windows Updates but they are just Information events. First after booting up Windows Updates says it's found 16 updates, then there are 16 events that say an update was detected. Then later when I checked for updates it found 5 update followed by 5 events saying an update was detected. But I seem to have all the required updates as Windows 8.1 is only getting the Security and Quality rollups and Windows Definitions now. I'm not too concerned about this but it does seem a bit strange.
 

DR.M

Malware Specialist
Joined
Sep 4, 2019
Messages
2,354
Karen,

Regarding the two files, I asked a colleague, and it seems that the two files are indeed problematic. Not original Microsoft files.

You have to run DISM/SFC if you haven't already done that.
 

Cookiegal

Karen
Thread Starter
Administrator
Malware Specialist Coordinator
Joined
Aug 27, 2003
Messages
121,910
I've checked with a Moderator and a Trusted Advisor both running Windows 8.1 Pro and the same two files are not signed on their machines either. I know some are and some aren't and don't the reason why but everything is working now as it should and I know it's not malware-related so I'm going to hold off for the time being running SFC and DISM mainly because it's annoying to have to wait so long for them to complete and having to run SFC multiple times. I will be getting a new computer in a year anyway.

Thanks again Panos for your help with this matter. :)
 

DR.M

Malware Specialist
Joined
Sep 4, 2019
Messages
2,354
Glad everything is working now. :)

As for those files, I don't know what is happening (that's something we are searching about it), but in any case they have to be digitally signed.

DISM/SFC don't take so much. Not more than an hour, both of them. And absolutely there is no need to run SFC multiple times.
 

Cookiegal

Karen
Thread Starter
Administrator
Malware Specialist Coordinator
Joined
Aug 27, 2003
Messages
121,910
that's something we are searching about it
Do you have someone looking into it further for me? If so thanks for that.

I've been told it's sometimes necessary to run SFC more than once as it may not be able to fix everything in the first run. But I'm not there yet anyway, we'll see if it finds anything first.
 

DR.M

Malware Specialist
Joined
Sep 4, 2019
Messages
2,354
Do you have someone looking into it further for me? If so thanks for that.
Yes, and it's something I would like to know the cause. :)

SFC will not fix more things when is executed several times in a row. In the case the result is "Windows Resource Protection found corrupt files and successfully repaired them", you may want to check if a second run would result to this: "Windows resource protection did not find any integrity violations".
 

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top