Windows defender update fail

Anonymous

Hello,

Since yesterday all definition updates fail, I tried to repair WU with the tool provided

by Microsoft but that didn't solved anything.

Please find the MpiSigStub.log :

Command: MpSigStub.exe /program "C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q

Start time: 28/07/2015 09:45 (version 11.1.5128.0)

=================================== ProductSearch ==================================

Windows Defender:

Status: Active

Product: 4.7.205.0

Engine: 1.1.11903.0

Signatures: 1.203.614.0

NIS Engine: 2.1.11804.0

NIS Signatures: 115.6.0.0

================================ PackageDiscovery ================================

ERROR 0x80070002 : CurrentDir(C:\WINDOWS\SoftwareDistribution\Download\Install) failed

ERROR 0x80070002 : SigStubDir(C:\WINDOWS\system32) failed

ERROR 0x80070002 : CollabDir(C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs) failed

ERROR 0x80070002 : DiscoverSignaturePackages

Watson Report: Position:

HRESULT: 0x80070002 P1

FailedFunction: PackageDiscovery P2

Operation: (null) P3

SourceComponentVersion: 11.1.5128.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: (null) P6

ProductName: (null) P7

Error Hearbeat Report:

ProductName: Windows Defender

HRESULT: 0x80070002

FailedFunction: PackageDiscovery

Details: No Package

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\MPASDLTA.VDM

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\MPAVDLTA.VDM

ERROR 0x80070002 : MpSigStubMain

End time: 28/07/2015 09:45

Command: MpSigStub.exe /program "C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q

Start time: 28/07/2015 10:03 (version 11.1.5128.0)

=================================== ProductSearch ==================================

Windows Defender:

Status: Active

Product: 4.7.205.0

Engine: 1.1.11903.0

Signatures: 1.203.614.0

NIS Engine: 2.1.11804.0

NIS Signatures: 115.6.0.0

================================ PackageDiscovery ================================

ERROR 0x80070002 : CurrentDir(C:\WINDOWS\SoftwareDistribution\Download\Install) failed

ERROR 0x80070002 : SigStubDir(C:\WINDOWS\system32) failed

ERROR 0x80070002 : CollabDir(C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs) failed

ERROR 0x80070002 : DiscoverSignaturePackages

Watson Report: Position:

HRESULT: 0x80070002 P1

FailedFunction: PackageDiscovery P2

Operation: (null) P3

SourceComponentVersion: 11.1.5128.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: (null) P6

ProductName: (null) P7

Error Hearbeat Report:

ProductName: Windows Defender

HRESULT: 0x80070002

FailedFunction: PackageDiscovery

Details: No Package

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\MPASDLTA.VDM

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\MPAVDLTA.VDM

ERROR 0x80070002 : MpSigStubMain

End time: 28/07/2015 10:03

Command: MpSigStub.exe /program "C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q

Start time: 28/07/2015 10:04 (version 11.1.5128.0)

=================================== ProductSearch ==================================

Windows Defender:

Status: Active

Product: 4.7.205.0

Engine: 1.1.11903.0

Signatures: 1.203.614.0

NIS Engine: 2.1.11804.0

NIS Signatures: 115.6.0.0

================================ PackageDiscovery ================================

ERROR 0x80070002 : CurrentDir(C:\WINDOWS\SoftwareDistribution\Download\Install) failed

ERROR 0x80070002 : SigStubDir(C:\WINDOWS\system32) failed

ERROR 0x80070002 : CollabDir(C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs) failed

ERROR 0x80070002 : DiscoverSignaturePackages

Watson Report: Position:

HRESULT: 0x80070002 P1

FailedFunction: PackageDiscovery P2

Operation: (null) P3

SourceComponentVersion: 11.1.5128.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: (null) P6

ProductName: (null) P7

Error Hearbeat Report:

ProductName: Windows Defender

HRESULT: 0x80070002

FailedFunction: PackageDiscovery

Details: No Package

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\MPASDLTA.VDM

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\MPAVDLTA.VDM

ERROR 0x80070002 : MpSigStubMain

End time: 28/07/2015 10:04

Command: MpSigStub.exe /program "D:\mpam-fe.exe"

Start time: 28/07/2015 10:15 (version 11.1.5128.0)

================================= CacheMpSigStub =================================

Copied MpSigStub.exe to C:\WINDOWS\system32\MpSigStub.exe

=================================== ProductSearch ==================================

Windows Defender:

Status: Active

Product: 4.7.205.0

Engine: 1.1.11903.0

Signatures: 1.203.614.0

NIS Engine: 2.1.11804.0

NIS Signatures: 115.6.0.0

================================ PackageDiscovery ================================

Package files discovered:

d:\af031b2f93513fd6e74e17888090d70a\mpasbase.vdm (1.203.0.0)

d:\af031b2f93513fd6e74e17888090d70a\mpasdlta.vdm (1.203.638.0)

d:\af031b2f93513fd6e74e17888090d70a\mpavbase.vdm (1.203.0.0)

d:\af031b2f93513fd6e74e17888090d70a\mpavdlta.vdm (1.203.638.0)

d:\af031b2f93513fd6e74e17888090d70a\mpengine.dll (1.1.11903.0)

AM FE:

Engine: 1.1.11903.0

AS base VDM: 1.203.0.0

AV base VDM: 1.203.0.0

AS delta VDM: 1.203.638.0

AV delta VDM: 1.203.638.0

================================= MpUpdateEngine =================================

Package files for the engine update:

d:\af031b2f93513fd6e74e17888090d70a\mpasbase.vdm (1.203.0.0)

d:\af031b2f93513fd6e74e17888090d70a\mpasdlta.vdm (1.203.638.0)

d:\af031b2f93513fd6e74e17888090d70a\mpavbase.vdm (1.203.0.0)

d:\af031b2f93513fd6e74e17888090d70a\mpavdlta.vdm (1.203.638.0)

d:\af031b2f93513fd6e74e17888090d70a\mpengine.dll (1.1.11903.0)

Updated from d:\af031b2f93513fd6e74e17888090d70a (0x0)

================================= ValidateUpdate =================================

MpSigStub successfully updated Windows Defender using the AM FE package.

Original: Updated to:

Engine: 1.1.11903.0 1.1.11903.0

AS base VDM: 1.203.0.0 1.203.0.0

AV base VDM: 1.203.0.0 1.203.0.0

AS delta VDM: 1.203.614.0 1.203.638.0

AV delta VDM: 1.203.614.0 1.203.638.0

Set DeltaUpdateFailure to 0

Set BddUpdateFailure to 0

End time: 28/07/2015 10:16

Command: MpSigStub.exe /program "C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta_Patch_1.203.638.0.exe" WD /q

Start time: 28/07/2015 10:17 (version 11.1.5128.0)

=================================== ProductSearch ==================================

Windows Defender:

Status: Active

Product: 4.7.205.0

Engine: 1.1.11903.0

Signatures: 1.203.638.0

NIS Engine: 2.1.11804.0

NIS Signatures: 115.6.0.0

================================ PackageDiscovery ================================

Package files discovered:

C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\1.203.638.0_TO_1.203.662.0_MPASDLTA.VDM._P (?.?.?.?)

C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\1.203.638.0_TO_1.203.662.0_MPAVDLTA.VDM._P (?.?.?.?)

AM BDD:

Engine: Not included

AS base VDM: Not included

AV base VDM: Not included

AS delta VDM: 1.203.662.0

AV delta VDM: 1.203.662.0

================================ PatchApplication ================================

Using directory C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs for temporary storage,

ERROR 0x8499041a : ApplyVdmPatch(C:\ProgramData\Microsoft\Windows Defender\Definition Updates{7F87A845-B086-4A0C-801D-C7A8EBB6CC9D}\mpasdlta.vdm, C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\1.203.638.0_TO_1.203.662.0_MPASDLTA.VDM._P, C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\056C0164-C112-4B64-8BFC-E033D36BBC11mpasdlta.vdm)

Watson Report: Position:

HRESULT: 0x8499041a P1

FailedFunction: PatchApplication P2

Operation: AM BDD P3

SourceComponentVersion: 11.1.5128.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: 4.7.205.0 P6

ProductName: Windows Defender P7

Error Hearbeat Report:

ProductName: Windows Defender

HRESULT: 0x8499041a

FailedFunction: PatchApplication

Details: 1.203.662.0

Set BddUpdateFailure to 1

ERROR 0x8499041a : One or more of the packages found failed to update for Windows Defender.

ERROR 0x8499041a : One or more of the products found failed to update; returning this error

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\1.203.638.0_TO_1.203.662.0_MPASDLTA.VDM._P

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\1.203.638.0_TO_1.203.662.0_MPAVDLTA.VDM._P

ERROR 0x8499041a : MpSigStubMain

End time: 28/07/2015 10:17

Command: MpSigStub.exe /program "C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q

Start time: 28/07/2015 11:05 (version 11.1.5128.0)

=================================== ProductSearch ==================================

Windows Defender:

Status: Active

Product: 4.7.205.0

Engine: 1.1.11903.0

Signatures: 1.203.638.0

NIS Engine: 2.1.11804.0

NIS Signatures: 115.6.0.0

================================ PackageDiscovery ================================

ERROR 0x80070002 : CurrentDir(C:\WINDOWS\SoftwareDistribution\Download\Install) failed

ERROR 0x80070002 : SigStubDir(C:\WINDOWS\system32) failed

ERROR 0x80070002 : CollabDir(C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs) failed

ERROR 0x80070002 : DiscoverSignaturePackages

Watson Report: Position:

HRESULT: 0x80070002 P1

FailedFunction: PackageDiscovery P2

Operation: (null) P3

SourceComponentVersion: 11.1.5128.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: (null) P6

ProductName: (null) P7

Error Hearbeat Report:

ProductName: Windows Defender

HRESULT: 0x80070002

FailedFunction: PackageDiscovery

Details: No Package

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\MPASDLTA.VDM

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\MPAVDLTA.VDM

ERROR 0x80070002 : MpSigStubMain

End time: 28/07/2015 11:05

Command: MpSigStub.exe /program "C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q

Start time: 28/07/2015 11:05 (version 11.1.5128.0)

=================================== ProductSearch ==================================

Windows Defender:

Status: Active

Product: 4.7.205.0

Engine: 1.1.11903.0

Signatures: 1.203.638.0

NIS Engine: 2.1.11804.0

NIS Signatures: 115.6.0.0

================================ PackageDiscovery ================================

ERROR 0x80070002 : CurrentDir(C:\WINDOWS\SoftwareDistribution\Download\Install) failed

ERROR 0x80070002 : SigStubDir(C:\WINDOWS\system32) failed

ERROR 0x80070002 : CollabDir(C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs) failed

ERROR 0x80070002 : DiscoverSignaturePackages

Watson Report: Position:

HRESULT: 0x80070002 P1

FailedFunction: PackageDiscovery P2

Operation: (null) P3

SourceComponentVersion: 11.1.5128.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: (null) P6

ProductName: (null) P7

Error Hearbeat Report:

ProductName: Windows Defender

HRESULT: 0x80070002

FailedFunction: PackageDiscovery

Details: No Package

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\MPASDLTA.VDM

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\MPAVDLTA.VDM

ERROR 0x80070002 : MpSigStubMain

End time: 28/07/2015 11:05

Command: MpSigStub.exe /program "C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q

Start time: 28/07/2015 11:12 (version 11.1.5128.0)

=================================== ProductSearch ==================================

Windows Defender:

Status: Active

Product: 4.7.205.0

Engine: 1.1.11903.0

Signatures: 1.203.638.0

NIS Engine: 2.1.11804.0

NIS Signatures: 115.6.0.0

================================ PackageDiscovery ================================

ERROR 0x80070002 : CurrentDir(C:\WINDOWS\SoftwareDistribution\Download\Install) failed

ERROR 0x80070002 : SigStubDir(C:\WINDOWS\system32) failed

ERROR 0x80070002 : CollabDir(C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs) failed

ERROR 0x80070002 : DiscoverSignaturePackages

Watson Report: Position:

HRESULT: 0x80070002 P1

FailedFunction: PackageDiscovery P2

Operation: (null) P3

SourceComponentVersion: 11.1.5128.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: (null) P6

ProductName: (null) P7

Error Hearbeat Report:

ProductName: Windows Defender

HRESULT: 0x80070002

FailedFunction: PackageDiscovery

Details: No Package

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\MPASDLTA.VDM

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\MPAVDLTA.VDM

ERROR 0x80070002 : MpSigStubMain

End time: 28/07/2015 11:12

Command: MpSigStub.exe /program "C:\WINDOWS\SoftwareDistribution\Download\Install\AM_Delta.exe" WD /q

Start time: 28/07/2015 12:35 (version 11.1.5128.0)

=================================== ProductSearch ==================================

Windows Defender:

Status: Active

Product: 4.7.205.0

Engine: 1.1.11903.0

Signatures: 1.203.638.0

NIS Engine: 2.1.11804.0

NIS Signatures: 115.6.0.0

================================ PackageDiscovery ================================

ERROR 0x80070002 : CurrentDir(C:\WINDOWS\SoftwareDistribution\Download\Install) failed

ERROR 0x80070002 : SigStubDir(C:\WINDOWS\system32) failed

ERROR 0x80070002 : CollabDir(C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs) failed

ERROR 0x80070002 : DiscoverSignaturePackages

Watson Report: Position:

HRESULT: 0x80070002 P1

FailedFunction: PackageDiscovery P2

Operation: (null) P3

SourceComponentVersion: 11.1.5128.0 P4

SourceComponentName: mpsigstub.exe P5

ProductVersion: (null) P6

ProductName: (null) P7

Error Hearbeat Report:

ProductName: Windows Defender

HRESULT: 0x80070002

FailedFunction: PackageDiscovery

Details: No Package

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\MPASDLTA.VDM

Deleted C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs\MPAVDLTA.VDM

ERROR 0x80070002 : MpSigStubMain

End time: 28/07/2015 12:35

If anyone can share any infos, please let me know. Thanks

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous

This very same problem keeps coming back to me for a some months, first on Windows 8.1, now on Windows 10.

I have no idea what is causing it, but I've managed to find a very simple fix which works flawlessly:

Open Windows Explorer
Navigate to C:\WINDOWS\Temp
Delete three items from this folder:

- A folder mentioned in your MpSigStub.log file (in your case it's C:\WINDOWS\Temp\01B9B130B1D30614A82293F9E628424C-Sigs)

- MpSigStub.log file itself

- The MPT (or MRT? I don't remember but there's only one folder there with a name like that) folder

Open Windows Defender
Switch to Update tab and click Update

Or, instead of doing 4-5, you can just wait for the next automatic Windows Update check to kick in.

0 comments

Answer accepted by question author

Anonymous

See: http://support.microsoft.com/kb/910336

You can manually download the (large file with engine and full definitions) latest definitions from the portal here:https://www.microsoft.com/security/portal/default.aspx

Try rebooting the PC. That often resolves update issues.

Check the PC date and time: Right click the clock in the system tray. Select Adjust

Date and Time.

Verify and correct the month, day, year, hour, minutes and time zone.

Reboot if you changed any of the above.

Reset the Windows Update components -

http://support.microsoft.com/default.aspx/kb/971058?p=1 - run the FixIt to reset the Windows update components.

Consider renaming the SoftwareDistribution folder:

Click Start

Type:

cmd

Right click on cmd in start menu and select 'Run as Administrator'

Type:

net stop wuauserv

Hit Enter

Type:

ren c:\windows\SoftwareDistribution softwaredistribution.old

Hit Enter

Type:

net start wuauserv

Hit Enter

Type:

exit

Hit Enter

0 comments

7 additional answers

Anonymous

2015-07-28T21:53:52+00:00

Has a Norton application or a McAfee application EVER been installed on the computer since you bought it?

Did a Norton free-trial or a McAfee free-trial [PICK ONE] come preinstalled on the computer when you bought it? (Doesn't matter if you never used or Activated it.)
Was this answer helpful?

0 comments No comments
Anonymous

2015-07-28T13:35:30+00:00

No the pc was running smoothly and other updates (for windows) were successfully installed but not for windows defender since 2 days.
Was this answer helpful?

0 comments No comments
Reza-Ameri 45,821 Reputation points Volunteer Moderator

2015-07-28T12:15:30+00:00

Did you installed anything or did you made any changes in your PC?

Are you able to install other Microsoft Updates? (if any)
Was this answer helpful?

0 comments No comments

Share via

Windows defender update fail

7 additional answers