Share via

Updating Windows Defender Antivirus fails with Error 0x80070643

Anonymous
2023-10-06T04:34:27+00:00

Hey. Update fails for Win10 Home.

It used to not even show as an update in Win Update, and Defender just didn't work at some point. Then I followed steps to delete logs/folders through powershell (after stopping relevant services), and now it at least gives the error above.

It should also be noted that originally the company that sold me my desktop had Windows installed with KMS to crack windows. After I complained to them, I removed KMS with malwarebytes, got a legit windows 10 key, and from what I understood made a clean install. This issue might still be related to that malware though.

Relevant logs:

2023/10/05 15:06:12.3303174 7208 9100 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : Beginning Installing of updates, CallerId = MoUpdateOrchestrator.

2023/10/05 15:06:12.3303684 7208 9100 UDP Title = Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.399.79.0)

2023/10/05 15:06:12.3303736 7208 9100 UDP UpdateId = C59D6402-7ADA-4545-9ACA-107CC6DB01D7.200

2023/10/05 15:06:12.3303746 7208 9100 UDP Bundles 19 updates:

2023/10/05 15:06:12.3303769 7208 9100 UDP F92E155C-94BC-4565-A248-DF34E3EE968E.200

2023/10/05 15:06:12.3303788 7208 9100 UDP 76FB05D6-7539-4654-80B3-D274118E7D32.200

2023/10/05 15:06:12.3304146 7208 9100 UDP E32326A1-A265-4CFD-8BC8-B1CC4E97B637.200

2023/10/05 15:06:12.3304168 7208 9100 UDP 0CC4D36F-F03C-49C4-AD06-ED026E631665.200

2023/10/05 15:06:12.3304187 7208 9100 UDP CD69D70C-9396-4A6E-BAE7-13FF3D85890D.200

2023/10/05 15:06:12.3304206 7208 9100 UDP 83E61A90-898B-4BB7-8F49-7AE7297A1CF8.200

2023/10/05 15:06:12.3304224 7208 9100 UDP DCA13DEB-0D1A-465C-9649-DDA4D32800CF.200

2023/10/05 15:06:12.3304241 7208 9100 UDP 84427297-8CD7-4FB7-A4C9-129FD4DFC53A.200

2023/10/05 15:06:12.3304257 7208 9100 UDP 8E723853-39A5-48D8-A196-D1D7873A9FB1.200

2023/10/05 15:06:12.3304273 7208 9100 UDP BA083A18-29F9-403B-A2E6-AD47005A406D.200

2023/10/05 15:06:12.3304289 7208 9100 UDP F544BF06-0864-4881-92F0-866DAD411048.200

2023/10/05 15:06:12.3304305 7208 9100 UDP A249D76C-FAA1-4C08-A49C-F7859CB865D0.200

2023/10/05 15:06:12.3304322 7208 9100 UDP A14CB6F4-19FA-49EB-9DF5-70C125AC3B66.200

2023/10/05 15:06:12.3304532 7208 9100 UDP 14EDDAA9-E04C-498F-9460-76E20CA0EEC3.200

2023/10/05 15:06:12.3304570 7208 9100 UDP 36464132-0917-4DD8-AC2E-3DBEE2848F00.200

2023/10/05 15:06:12.3304586 7208 9100 UDP E7E06682-ECBC-4633-A7A9-862D1CED3BAA.200

2023/10/05 15:06:12.3304602 7208 9100 UDP 7B738D35-F5E6-4D09-B0A8-6CF4087D809C.200

2023/10/05 15:06:12.3304618 7208 9100 UDP 60598B0A-28FF-4C3A-8245-4B8998917F27.200

2023/10/05 15:06:12.3304635 7208 9100 UDP 48BFB4EA-538D-40E3-B602-99B5B34714F6.200

2023/10/05 15:06:12.3583017 7208 9100 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : Mutex for Deployment job is created. Mutex = 8c3fcc84-7410-4a95-8b89-a166a0190486

2023/10/05 15:06:12.3583066 7208 9100 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : Update C59D6402-7ADA-4545-9ACA-107CC6DB01D7.200 started delegate invoked.

2023/10/05 15:06:12.3661352 7208 9100 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : Installing starting for update C59D6402-7ADA-4545-9ACA-107CC6DB01D7.200, deployable update count = 3

2023/10/05 15:06:12.3675933 7208 9100 Handler Registering JIT COM server with CLSID {A779D8EB-0248-44A0-8E02-554CBAFCD5F5} and APPID {7C6A365F-BAAC-4278-A021-965A953D77D7}

2023/10/05 15:06:12.3700934 7208 9100 Handler Successfully registered JIT COM server

2023/10/05 15:06:12.3701354 7208 9100 Handler Switching to UpdateDeploymentProvider.dll

2023/10/05 15:06:12.3986344 13076 212 Handler UH: CoCreateInstance of remote handler succeeded with CLSID a779d8eb-0248-44a0-8e02-554cbafcd5f5

2023/10/05 15:06:12.4002005 13076 212 Handler UH: RegisterRemoteHandlerServer suceedded

2023/10/05 15:06:12.4072531 584 8116 DownloadManager Preparing update for install, updateId = E7E06682-ECBC-4633-A7A9-862D1CED3BAA.200.

2023/10/05 15:06:12.4767256 584 8116 DownloadManager ExtractUpdateFiles

2023/10/05 15:06:12.4768504 7208 9100 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : Update C59D6402-7ADA-4545-9ACA-107CC6DB01D7.200 deployment data prepared successfully.

2023/10/05 15:06:12.4786340 13076 16364 Handler * START * Command Line Install Updates to install = 1

2023/10/05 15:06:13.7065975 13076 16364 Handler Command line install completed. Return code = 0x00000000, Result = Succeeded, Reboot required = false

2023/10/05 15:06:13.7066703 13076 16364 Handler * END * Command Line Install 0x0

2023/10/05 15:06:13.7067697 7208 2432 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : NotifyClient (2432)(0) called for update id C59D6402-7ADA-4545-9ACA-107CC6DB01D7, code = Update progress, percent complete = 33

2023/10/05 15:06:13.7096254 7208 9100 WIL FAILED [80070002] file = onecore\enduser\windowsupdate\client\comapi\deploymentjobhost.cpp, line = 1468

2023/10/05 15:06:13.7096287 7208 9100 WIL FAILED [80070002] file = onecore\enduser\windowsupdate\client\comapi\deploymentjobhost.cpp, line = 1147

2023/10/05 15:06:13.7122584 584 8116 DownloadManager Preparing update for install, updateId = 60598B0A-28FF-4C3A-8245-4B8998917F27.200.

2023/10/05 15:06:14.8470633 584 8116 DownloadManager ExtractUpdateFiles

2023/10/05 15:06:14.8473192 7208 9100 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : Update C59D6402-7ADA-4545-9ACA-107CC6DB01D7.200 deployment data prepared successfully.

2023/10/05 15:06:14.8476353 13076 16364 Handler * START * Command Line Install Updates to install = 1

2023/10/05 15:06:16.6664033 13076 16364 Handler Command line install completed. Return code = 0x00000000, Result = Succeeded, Reboot required = false

2023/10/05 15:06:16.6665880 13076 16364 Handler * END * Command Line Install 0x0

2023/10/05 15:06:16.6697397 7208 9100 WIL FAILED [80070002] file = onecore\enduser\windowsupdate\client\comapi\deploymentjobhost.cpp, line = 1468

2023/10/05 15:06:16.6697430 7208 9100 WIL FAILED [80070002] file = onecore\enduser\windowsupdate\client\comapi\deploymentjobhost.cpp, line = 1147

2023/10/05 15:06:16.6697682 7208 12160 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : NotifyClient (12160)(0) called for update id C59D6402-7ADA-4545-9ACA-107CC6DB01D7, code = Update progress, percent complete = 66

2023/10/05 15:06:16.6724674 584 8116 DownloadManager Preparing update for install, updateId = 48BFB4EA-538D-40E3-B602-99B5B34714F6.200.

2023/10/05 15:06:16.7121086 584 8116 DownloadManager ExtractUpdateFiles

2023/10/05 15:06:16.7122370 7208 9100 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : Update C59D6402-7ADA-4545-9ACA-107CC6DB01D7.200 deployment data prepared successfully.

2023/10/05 15:06:16.7124974 13076 16364 Handler * START * Command Line Install Updates to install = 1

2023/10/05 15:09:19.4658757 13076 16364 Handler Command line install completed. Return code = 0x800705b4, Result = Failed, Reboot required = false

2023/10/05 15:09:19.4660099 7208 12368 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : Update C59D6402-7ADA-4545-9ACA-107CC6DB01D7.200 failure delegate invoked.

2023/10/05 15:09:19.4660377 13076 16364 Handler * END * Command Line Install 0x8024200b

2023/10/05 15:09:19.4714193 7208 9100 WIL FAILED [80070002] file = onecore\enduser\windowsupdate\client\comapi\deploymentjobhost.cpp, line = 1468

2023/10/05 15:09:19.4714226 7208 9100 WIL FAILED [80070002] file = onecore\enduser\windowsupdate\client\comapi\deploymentjobhost.cpp, line = 1147

2023/10/05 15:09:19.4714520 7208 9100 UDP FAILED [80070643] Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : Installing for Top level update id C59D6402-7ADA-4545-9ACA-107CC6DB01D7.200, bundled update id 48BFB4EA-538D-40E3-B602-99B5B34714F6.200 [CUpdateDeploymentJob::DeploySingleUpdateInternal:2800]

2023/10/05 15:09:19.4714704 7208 9100 UDP FAILED [8024200B] Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : Installing for Top level update id C59D6402-7ADA-4545-9ACA-107CC6DB01D7.200, bundled update id 48BFB4EA-538D-40E3-B602-99B5B34714F6.200 [CUpdateDeploymentJob::DeploySingleUpdateInternal:2817]

2023/10/05 15:09:19.4714735 7208 9100 WIL FAILED [8024200B] file = onecore\enduser\windowsupdate\client\engine\updatedeploymentprovider\lib\updatedeploymentjob.cpp, line = 2819

2023/10/05 15:09:19.4714846 7208 10596 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : NotifyClient (10596)(0) called for update id C59D6402-7ADA-4545-9ACA-107CC6DB01D7, code = Update failed, percent complete = 100

2023/10/05 15:09:19.4714893 7208 9100 UDP Mutex will be closed. index = 0, HANDLE = 0x00000C54

2023/10/05 15:09:19.4715013 7208 9100 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : Method failed for update C59D6402-7ADA-4545-9ACA-107CC6DB01D7.200, hrDeploy = 0x8024200b

2023/10/05 15:09:19.4715046 7208 9100 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : Update C59D6402-7ADA-4545-9ACA-107CC6DB01D7.200 failure delegate invoked.

2023/10/05 15:09:19.4738457 584 8116 Agent LogHistory called. idUpdate={C59D6402-7ADA-4545-9ACA-107CC6DB01D7}.200, resultMapped=80070643, resultUnMapped=800705B4

2023/10/05 15:09:19.4741784 584 8116 Agent WU client logged Install deloyment history, caller = MoUpdateOrchestrator, update C59D6402-7ADA-4545-9ACA-107CC6DB01D7.200, classification E0789628-CE08-4437-BE74-2495B842F43B

2023/10/05 15:09:19.4743102 7208 10596 WIL FAILED [80070002] file = onecore\enduser\windowsupdate\client\comapi\deploymentjobhost.cpp, line = 1468

2023/10/05 15:09:19.4743128 7208 10596 WIL FAILED [80070002] file = onecore\enduser\windowsupdate\client\comapi\deploymentjobhost.cpp, line = 1075

2023/10/05 15:09:19.4748793 7208 10596 ComApi Deployment callback complete for UpdateID = c59d6402-7ada-4545-9aca-107cc6db01d7, callback code = 8, CallbackInfo cookie length = 0

2023/10/05 15:09:19.4805885 7208 9100 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : Job complete delegate invoked.

2023/10/05 15:09:19.4805936 7208 9100 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : Ending Installing updates, CallerId = MoUpdateOrchestrator, Exit code = 0x00000000

2023/10/05 15:09:19.4806781 7208 10104 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : WaitForEnd invoked for deployment job. Beginning the wait now!

2023/10/05 15:09:19.4807167 7208 12644 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : NotifyClient (12644)(0) called with Deployment callback code = Job complete, reboot status = no reboot

2023/10/05 15:09:19.4807180 13076 212 Handler FAILED [800700B7] Handler process got unexpected result: 0, exiting

2023/10/05 15:09:19.4807353 7208 12644 ComApi Install ClientId = MoUpdateOrchestrator

2023/10/05 15:09:19.4807375 7208 12644 ComApi Install call complete (succeeded = 0, succeeded with errors = 0, failed = 1, cancelled = 0, unaccounted = 0

2023/10/05 15:09:19.4807743 7208 12644 ComApi Reboot required = False

2023/10/05 15:09:19.4807753 7208 12644 ComApi Call error code = 0x80240022

2023/10/05 15:09:19.4807762 7208 12644 ComApi * END * Install ClientId = MoUpdateOrchestrator

2023/10/05 15:09:19.4808570 7208 10104 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : WaitForEnd for deployment job completed. Job state = Complete

2023/10/05 15:09:19.4808602 7208 10104 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : CallbackWorker returning successfully.

2023/10/05 15:09:19.4809638 7208 21344 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : WaitForEnd invoked for deployment job. Beginning the wait now!

2023/10/05 15:09:19.4809766 7208 21344 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : WaitForEnd for deployment job completed. Job state = Complete

2023/10/05 15:09:19.4809808 7208 21344 ComApi WU client update deployment job 87D1F22E-EAD0-4575-9AC6-E395D21D8983 end wait complete.

2023/10/05 15:09:19.4809915 7208 21344 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : Per-job deployment completed = Yes"

2023/10/05 15:09:19.4809951 7208 21344 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : EndUpdateDeployment invoked for job. Job complete = Yes, erase Job = True

2023/10/05 15:09:19.4810105 7208 21344 ComApi WU client EndUpdateDeployment for deployment job 87D1F22E-EAD0-4575-9AC6-E395D21D8983 complete.

2023/10/05 15:09:19.4810124 7208 21344 ComApi WU client update deployment job 87D1F22E-EAD0-4575-9AC6-E395D21D8983 deployment result. hr = 0x00000000

2023/10/05 15:09:19.4810331 7208 21344 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : FinalRelease for deployment job.

2023/10/05 15:09:19.4810363 7208 21344 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : WaitForEnd invoked for deployment job. Beginning the wait now!

2023/10/05 15:09:19.4810408 7208 21344 UDP Deployment job Id 87D1F22E-EAD0-4575-9AC6-E395D21D8983 : WaitForEnd for deployment job completed. Job state = Complete

2023/10/05 15:09:19.4812638 7208 21344 ComApi QUEUED Updates to Install = 1

2023/10/05 15:09:19.4812654 7208 21344 ComApi Install ClientId = MoUpdateOrchestrator (cV: dtkwW43yCU2qrspD.8.0.0)

2023/10/05 15:09:19.4812744 7208 21344 ComApi Install call complete (succeeded = 0, succeeded with errors = 0, failed = 1, cancelled = 0, unaccounted = 0

2023/10/05 15:09:19.4813135 7208 21344 ComApi * END * All federated installs have completed. ClientId = MoUpdateOrchestrator (cV = dtkwW43yCU2qrspD.8.1), hr = 0x00000000

2023/10/05 15:09:19.4839589 7208 2564 ComApi Reloading CUpdate C59D6402-7ADA-4545-9ACA-107CC6DB01D7.200 from datastore...

2023/10/05 15:09:19.4872934 7208 2564 ComApi Deserializing update from serialized BSTR.

2023/10/05 15:09:19.4874575 7208 2564 ComApi Byte length of the input buffer for deserialization: 38794

2023/10/05 15:09:19.4880190 7208 2564 ComApi Deserializing update from serialized BSTR.

2023/10/05 15:09:19.4881303 7208 2564 ComApi Deserializing update from serialized BSTR.

2023/10/05 15:09:19.4882701 7208 2564 ComApi Deserializing update from serialized BSTR.

2023/10/05 15:09:19.4883744 7208 2564 ComApi Deserializing update from serialized BSTR.

2023/10/05 15:09:19.4884952 7208 2564 ComApi Deserializing update from serialized BSTR.

2023/10/05 15:09:19.4886102 7208 2564 ComApi Deserializing update from serialized BSTR.

2023/10/05 15:09:19.4887301 7208 2564 ComApi Deserializing update from serialized BSTR.

2023/10/05 15:09:19.4888457 7208 2564 ComApi Deserializing update from serialized BSTR.

2023/10/05 15:09:19.4889624 7208 2564 ComApi Deserializing update from serialized BSTR.

2023/10/05 15:09:19.4890686 7208 2564 ComApi Deserializing update from serialized BSTR.

2023/10/05 15:09:19.4891964 7208 2564 ComApi Deserializing update from serialized BSTR.

2023/10/05 15:09:19.4893040 7208 2564 ComApi Deserializing update from serialized BSTR.

2023/10/05 15:09:19.4894318 7208 2564 ComApi Deserializing update from serialized BSTR.

2023/10/05 15:09:19.4895372 7208 2564 ComApi Deserializing update from serialized BSTR.

Windows for home | Windows 10 | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

11 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-10-10T00:59:08+00:00

    This is a normal phenomenon because when you execute this command, theoretically, Windows Security should have a notification pop-up to alert you about the security risk detected, which is actually the command you executed.

    This command is used to restart the Windows Defender service, and using a command to stop the service is considered an unsafe action by Windows Defender. So, your Windows Defender is currently functioning correctly, and you can manually check for Security intelligence updates in the Windows Security app.

    Or you can visit Latest security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware - Microsoft Security Intelligence to download/install the update package manually.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2023-10-08T03:27:41+00:00

    You can restart the Windows defender service by following the steps below: Run Command Prompt as an administrator ("Win" logo key + "Q" to open Search box*, type"Command Prompt", select "Run as administrator"), and copy and paste the following commands into the* Command Prompt and press Enter to run it.

    net start windefend & net stop windefend & net start windefend

    You can then manually update Security intelligence in Windows Security.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2023-10-06T16:48:50+00:00

    Tried all of these steps. Still getting stuck on 66% on Defender Intelligence Update installation (after 5 min of which it fails with 0x80070643 as usual).

    Image

    Was this answer helpful?

    0 comments
  4. Anonymous
    2023-10-06T16:27:47+00:00

    Hey!
    Thanks for the reply.

    Have tried a bunch of these already, but that was back when the update wouldn't even show up. Maybe they'll do the trick now. Will let you know shortly.

    For now, I'll just answer your first q:
    Version 10.0.19045 Build 19045

    Image

    Was this answer helpful?

    0 comments
  5. Anonymous
    2023-10-06T09:04:18+00:00

    Hello ,

    Good to see you in Microsoft Community.

    Firstly, could you let me know the specific system version (OS Build)? You can check it by pressing Win + X > System > Windows specifications*, click “Copy” and paste it in your next reply*.

    Based on the information you have provided, it looks like it is due to Windows Update related component anomalies and you can try the steps below:

    1. Windows update Troubleshooting

    SelectStart*>Settings>Update & Security>Troubleshoot>Additional troubleshooters. Next, underGet up and running, selectWindows Update>Run the troubleshooter.*

    When the troubleshooter is finished running, it's a good idea to restart your device.

    Next, check for new updates. SelectStart*>Settings>Update & Security>Windows Update>Check for updatesand then install any available updates.*

    2. Clean the system updates cache

    Run Command Prompt as an administrator ("Win" logo key + "Q", type "cmd", select "Run as administrator"), and type the following commands one by one.

    net stop wuauserv

net stop bits

net stop cryptsvc

rd /s /q c:\Windows\SoftwareDistribution

net start wuauserv

sc config wuauserv start=auto

net start bits

sc config bits start=auto

net start cryptsvc

sc config cryptsvc start=auto

    3. Optimize network connection

    You can optimize your network connection to Microsoft servers so that you can troubleshoot network problems. "Win" logo key + "Q" to open the search box, type 'ncpa.cpl', press Enter to open the "Network Connections" window, select your network adapter, right-click it > "Properties", double-click "Internet Protocol Version (TCP/IP)", then check “Use the following DNS server address", and*****type* "4.2.2.1" in "Preferred DNS server", and type "4.2.2.2" in "Alternate DNS server", then press OK*.*

    If your other network applications fail to work properly (unable to load or slow connection) due to the above changes, you can set it to "Obtain DNS server address automatically" after the problem is fixed.

    4. Check for apps Updates

    Since updates for many core system components (such as Windows Defender) are through the Microsoft Store, you may check in there for available updates, especially from the Microsoft Store itself.

    • "Win" logo key + "R" to open "Run", type "wsreset.exe", and pressEnter*(this will open a blank "Command Prompt" window, which will close and automatically open the Microsoft Store after about 10 seconds).*
    • Open Microsoft Store*, click "Library" in the lower left corner, then you will see the installed applications, click "Get updates" to see if there are any available update, and click the "Update" button on the right to update.*

    If anything is unclear, please do not hesitate to let me know.

    Best Regards,

    Mosken_L - MSFT | Microsoft Community Support Specialist

    Was this answer helpful?

    0 comments