This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
I'm seeing a similar problem - last raft of windows updates for my win8.1 x64 machine, everything works fine except the definition update for defender. I've tried downloading the definition update directly and ran the mpas-fex64.exe, which simply returns, no messages, but update still fails. Here's the mpsig* information showing defender's got some dll's out of sync. My guess is this has been failing for awhile. Any way to repair it short of a reinstall?
Command: MpSigStub.exe /program "C:\Windows\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q
Start time: 6/15/2014 5:40 PM (version 11.1.4590.0)
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPASDLTA.VDM (1.175.2352.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPAVDLTA.VDM (1.175.2352.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\NISBASE.VDM (111.0.0.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\GAPAENGINE.DLL (2.1.10502.0)
AM Delta: NIS Full:
Engine: Not included NIS engine: 2.1.10502.0
AS base VDM: Not included NIS base VDM: 111.0.0.0
AV base VDM: Not included NIS full VDM: 111.25.0.0
AS delta VDM: 1.175.2352.0
AV delta VDM: 1.175.2352.0
================================ PatchApplication ================================
Patched nisfull.vdm to 111.25.0.0
================================= MpUpdateEngine =================================
Package files for the engine update:
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P (?.?.?.?)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPASDLTA.VDM (1.175.2352.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPAVDLTA.VDM (1.175.2352.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\NISBASE.VDM (111.0.0.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\nisfull.vdm (111.25.0.0)
C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\GAPAENGINE.DLL (2.1.10502.0)
ERROR 0x800106ba : MpUpdateEngine(C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs)
================================== XcopyDeployment =================================
Using Xcopy location: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates
================================== XcopyForProduct =================================
Copied mpasdlta.vdm
Copied mpavdlta.vdm
Copied gapaengine.dll
Copied nisbase.vdm
Copied nisfull.vdm
================================== ServiceStart ==================================
ERROR 0x80070005 : OpenServiceW
ERROR 0x80070005 : XcopyDeployment
ERROR 0x80070005 : IProduct->UpdateEngine
================================= ValidateUpdate =================================
mpasdlta.vdm version in package is 1.175.2352.0, but after update machine has older version 1.175.417.0
mpavdlta.vdm version in package is 1.175.2352.0, but after update machine has older version 1.175.417.0
Watson Report: Position:
HRESULT: 0x80070005 P1
FailedFunction: MpUpdateEngine P2
Operation: AM Delta P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.5.218.0 P6
ProductName: Windows Defender P7
ERROR 0x800106ba : MpConfigSetValue(DeltaUpdateFailure)
================================= ValidateUpdate =================================
nisfull.vdm version in package is 111.25.0.0, but after update machine has older version 111.19.0.0
Watson Report: Position:
HRESULT: 0x80070005 P1
FailedFunction: MpUpdateEngine P2
Operation: NIS Full P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: 4.5.218.0 P6
ProductName: Windows Defender P7
ERROR 0x80070005 : One or more of the packages found failed to update for Windows Defender.
ERROR 0x80070005 : One or more of the products found failed to update; returning this error
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\111.0.0.0_TO_111.25.0.0_NISFULL.VDM_SOURCE_NISBASE.VDM._P
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPASDLTA.VDM
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\MPAVDLTA.VDM
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\NISBASE.VDM
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\nisfull.vdm
Deleted C:\Windows\Temp\532E177AAE7D2F54FB0E3D5965B66E07-Sigs\GAPAENGINE.DLL
ERROR 0x80070005 : MpSigStubMain
End time: 6/15/2014 5:40 PM
Command: MpSigStub.exe /program "C:\Users\matt\Downloads\mpas-feX64.exe"
Start time: 6/15/2014 5:44 PM (version 11.1.4590.0)
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
g:\59630698aa14776ecf0f\mpasbase.vdm (1.175.0.0)
g:\59630698aa14776ecf0f\mpasdlta.vdm (1.175.2365.0)
g:\59630698aa14776ecf0f\mpengine.dll (1.1.10600.0)
AS FE:
Engine: 1.1.10600.0
AS base VDM: 1.175.0.0
AV base VDM: Not included
AS delta VDM: 1.175.2365.0
AV delta VDM: Not included
=============================== PackagesNotApplicable ==============================
No products found to update.
ERROR 0x80070490 : SearchForApplicableProducts
Deleted g:\59630698aa14776ecf0f\mpasbase.vdm
Deleted g:\59630698aa14776ecf0f\mpasdlta.vdm
Deleted g:\59630698aa14776ecf0f\mpengine.dll
Watson Report: Position:
HRESULT: 0x80070490 P1
FailedFunction: PackagesNotApplicable P2
Operation: (null) P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: (null) P6
ProductName: (null) P7
ERROR 0x80070490 : MpSigStubMain
End time: 6/15/2014 5:44 PM
Command: MpSigStub.exe /program "C:\Users\matt\Downloads\mpas-feX64.exe"
Start time: 6/15/2014 5:44 PM (version 11.1.4590.0)
================================= CacheMpSigStub =================================
Copied MpSigStub.exe to C:\Windows\system32\MpSigStub.exe
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
g:\475cf70691f8cad655a4e80355955bd3\mpasbase.vdm (1.175.0.0)
g:\475cf70691f8cad655a4e80355955bd3\mpasdlta.vdm (1.175.2365.0)
g:\475cf70691f8cad655a4e80355955bd3\mpengine.dll (1.1.10600.0)
AS FE:
Engine: 1.1.10600.0
AS base VDM: 1.175.0.0
AV base VDM: Not included
AS delta VDM: 1.175.2365.0
AV delta VDM: Not included
=============================== PackagesNotApplicable ==============================
No products found to update.
ERROR 0x80070490 : SearchForApplicableProducts
Deleted g:\475cf70691f8cad655a4e80355955bd3\mpasbase.vdm
Deleted g:\475cf70691f8cad655a4e80355955bd3\mpasdlta.vdm
Deleted g:\475cf70691f8cad655a4e80355955bd3\mpengine.dll
Watson Report: Position:
HRESULT: 0x80070490 P1
FailedFunction: PackagesNotApplicable P2
Operation: (null) P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: (null) P6
ProductName: (null) P7
ERROR 0x80070490 : MpSigStubMain
End time: 6/15/2014 5:45 PM
Command: MpSigStub.exe /program mpas-feX64.exe
Start time: 6/15/2014 5:54 PM (version 11.1.4590.0)
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
g:\4ce5e2e04bedb5f9f42e6449d1\mpasbase.vdm (1.175.0.0)
g:\4ce5e2e04bedb5f9f42e6449d1\mpasdlta.vdm (1.175.2365.0)
g:\4ce5e2e04bedb5f9f42e6449d1\mpengine.dll (1.1.10600.0)
AS FE:
Engine: 1.1.10600.0
AS base VDM: 1.175.0.0
AV base VDM: Not included
AS delta VDM: 1.175.2365.0
AV delta VDM: Not included
=============================== PackagesNotApplicable ==============================
No products found to update.
ERROR 0x80070490 : SearchForApplicableProducts
Deleted g:\4ce5e2e04bedb5f9f42e6449d1\mpasbase.vdm
Deleted g:\4ce5e2e04bedb5f9f42e6449d1\mpasdlta.vdm
Deleted g:\4ce5e2e04bedb5f9f42e6449d1\mpengine.dll
Watson Report: Position:
HRESULT: 0x80070490 P1
FailedFunction: PackagesNotApplicable P2
Operation: (null) P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: (null) P6
ProductName: (null) P7
ERROR 0x80070490 : MpSigStubMain
End time: 6/15/2014 5:54 PM
Command: MpSigStub.exe /program mpas-feX64.exe
Start time: 6/15/2014 5:55 PM (version 11.1.4590.0)
================================= CacheMpSigStub =================================
Copied MpSigStub.exe to C:\Windows\system32\MpSigStub.exe
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
g:\4b9a1d7f8d9a34ddc32118c9\mpasbase.vdm (1.175.0.0)
g:\4b9a1d7f8d9a34ddc32118c9\mpasdlta.vdm (1.175.2365.0)
g:\4b9a1d7f8d9a34ddc32118c9\mpengine.dll (1.1.10600.0)
AS FE:
Engine: 1.1.10600.0
AS base VDM: 1.175.0.0
AV base VDM: Not included
AS delta VDM: 1.175.2365.0
AV delta VDM: Not included
=============================== PackagesNotApplicable ==============================
No products found to update.
ERROR 0x80070490 : SearchForApplicableProducts
Deleted g:\4b9a1d7f8d9a34ddc32118c9\mpasbase.vdm
Deleted g:\4b9a1d7f8d9a34ddc32118c9\mpasdlta.vdm
Deleted g:\4b9a1d7f8d9a34ddc32118c9\mpengine.dll
Watson Report: Position:
HRESULT: 0x80070490 P1
FailedFunction: PackagesNotApplicable P2
Operation: (null) P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: (null) P6
ProductName: (null) P7
ERROR 0x80070490 : MpSigStubMain
End time: 6/15/2014 5:55 PM
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
Answer accepted by question author
Yes, you can try deleting that file, it'll rebuild, but rename instead of deleting. And you can try changing registry value to MpScanCache-0.bin, instead of MpScanCache-1.bin. Registry Editor will not be able to change the value (permission problems), so you have to open Registry Editor with the method I discussed in answer to this thread:
One more question:
What is the value of SFCState key in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Scan?
Prashant Kumar
Flush the definitions per step 2 of the second part of this FAQ:
Troubleshooting General Errors while Updating
2. Remove installed Virus Definitions
Start Command Prompt as Administrator –> Type these codes (hit enter after each code):
cd %ProgramFiles%
cd "Microsoft Security Client" [cd "Windows Defender" for Windows Defender]
mpcmdrun.exe -removedefinitions -all
exit
It will remove installed definitions. Now try to update again.
Sorry, due to lack of time I can't help you much but one thing I want to point out is that you have probably downloaded wrong manual update. Correct link for Windows Defender in Windows 8.1 is:
http://go.microsoft.com/fwlink/?LinkID=121721&arch=x64
If you see the log:
Command: MpSigStub.exe /program "C:\Users\matt\Downloads\mpas-feX64.exe"
Start time: 6/15/2014 5:44 PM (version 11.1.4590.0)
================================= CacheMpSigStub =================================
Copied MpSigStub.exe to C:\Windows\system32\MpSigStub.exe
=================================== ProductSearch ==================================
Windows Defender:
Status: Active
Product: 4.5.218.0
Engine: 1.1.10600.0
Signatures: 1.175.417.0
NIS Engine: 2.1.10502.0
NIS Signatures: 111.19.0.0
================================ PackageDiscovery ================================
Package files discovered:
g:\475cf70691f8cad655a4e80355955bd3\mpasbase.vdm (1.175.0.0)
g:\475cf70691f8cad655a4e80355955bd3\mpasdlta.vdm (1.175.2365.0)
g:\475cf70691f8cad655a4e80355955bd3\mpengine.dll (1.1.10600.0)
AS FE:
Engine: 1.1.10600.0
AS base VDM: 1.175.0.0
AV base VDM: Not included
AS delta VDM: 1.175.2365.0
AV delta VDM: Not included
=============================== PackagesNotApplicable ==============================
No products found to update.
ERROR 0x80070490 : SearchForApplicableProducts
Deleted g:\475cf70691f8cad655a4e80355955bd3\mpasbase.vdm
Deleted g:\475cf70691f8cad655a4e80355955bd3\mpasdlta.vdm
Deleted g:\475cf70691f8cad655a4e80355955bd3\mpengine.dll
Watson Report: Position:
HRESULT: 0x80070490 P1
FailedFunction: PackagesNotApplicable P2
Operation: (null) P3
SourceComponentVersion: 11.1.4590.0 P4
SourceComponentName: mpsigstub.exe P5
ProductVersion: (null) P6
ProductName: (null) P7
ERROR 0x80070490 : MpSigStubMain
End time: 6/15/2014 5:45 PM
The bolded part in 'PackagesNotApplicable' is saying 'No product found to update' which means the definitions contained in manual update is not applicable to Windows Defender, and thus it will not update and throw 0x80070490 even is Windows Defender is working properly. Further, I found that mpas-feX64.exe is available only for 'Windows Intune', 'System Center' products and 'Forefront Endpoint Protection' which is clearly not your product.
I'm not saying this is the main problem, inability to update through Windows Update clearly shows some problem with Windows Defender which needs to be solved. You can try clearing the Temp folder as I suggested in the original thread. Remember, you must copy those two log files somewhere.
Prashant Kumar
I've split your issue from the original question, which was for Windows RT and not 8.x x64.
It would appear that you have successfully removed the definitions and engine, but the problem with updating continues.
Your logs show two errors. The first, 0x80070005, means that there is a permissions problem.
The second, which is listed multiple times, 0x80070490, suggests that Windows Update and/or Defender is corrupt.
See this KB article:
http://support.microsoft.com/kb/958044
Has there ever been any other antivirus installed, even a trial version? Does Windows Update work for other updates?
-steve
That didn't work - I think it needs windows defender running to fix things. Here's the message I got:
C:\Program Files\Windows Defender>MpCmdRun.exe -removedefinitions -all
Service Version: 0.0.0.0
Engine Version: 0.0.0.0
NIS Engine Version: 0.0.0.0
No engine/signature is currently loaded.
Subsequently tried windows update to install the update - failed again.
running the mpas-fex64 exe exits instantly - does it rely on the service running, too? Is this anything more than copying a file somewhere or simply emptying it out?
