pennsylvaniaron Posted November 16, 2018 Share Posted November 16, 2018 anyone? regards... Quote Link to comment Share on other sites More sharing options...
Thiersee Posted November 16, 2018 Share Posted November 16, 2018 Hi Ron, I don't think WUD/WTK have the capability to integrate updates for the defender. Quote Link to comment Share on other sites More sharing options...
pennsylvaniaron Posted November 17, 2018 Share Posted November 17, 2018 thiersee I understand that. But if no one else is getting an error on the simple WUD install of the monthly windows defender definitions then it has to be in my installation. I used last months (october) iso on my VM and that also got failed to update defender definitions. I did remove the IE11 meet the browser tweak because it doesn't seem to be needed anymore. other than that its a typical new iso creation. I am using the lastest NFW 4.7.2.3221.1, FP, reader, ccleaner and telemetry. Guess I'll keep experimenting. regards... Quote Link to comment Share on other sites More sharing options...
rhahgleuhargh Posted November 17, 2018 Author Share Posted November 17, 2018 @pennsylvaniaron I disable Windows Defender in my VMs, since they are reformatted every month. In my round of test, no update was asked by WU, but I'll make a try in a few days to see if Windows Defender definition update is asked. If you suspect a bug due to your tweaks, just make a test without them and recheck. I don't think that integration causes WU bugs. If you want to integrate Defender updates I think it's possible to do it in RunOnce via WTKinstaller or setupcomplete.cmd. Quote Link to comment Share on other sites More sharing options...
pennsylvaniaron Posted November 17, 2018 Share Posted November 17, 2018 2 hours ago, rhahgleuhargh said: @pennsylvaniaron I disable Windows Defender in my VMs, since they are reformatted every month. In my round of test, no update was asked by WU, but I'll make a try in a few days to see if Windows Defender definition update is asked. If you suspect a bug due to your tweaks, just make a test without them and recheck. I don't think that integration causes WU bugs. If you want to integrate Defender updates I think it's possible to do it in RunOnce via WTKinstaller or setupcomplete.cmd. rhahgleuhargh thanks for the feedback. As you know I have been a member of this blog for a long time and have been making the iso for over 2 years. every month when my vm is completed and i go to do WUD there have always been naturally a few different updates each month but ALWAYS MRT and defender definition (kb). All of a sudden this month the defender kb update fails. This has never happened before. I realize that there are a few different methods and many variations for creating the iso, classic, convenience and thiersee uses his own method. I thought it was a $M server issue but all my home computers are getting the defender updates, no problem. While minor it seems to be a bug (all of a sudden) in my install. My concern is that I believe if an update keeps failing and you dont hide it I think it prevents new updates from being recognized. Lastly how do you DISABLE windows defender in your VM? regards Quote Link to comment Share on other sites More sharing options...
rhahgleuhargh Posted November 17, 2018 Author Share Posted November 17, 2018 (edited) I just uncheck or hide them after WU analyze. Edited November 17, 2018 by rhahgleuhargh Quote Link to comment Share on other sites More sharing options...
pennsylvaniaron Posted November 17, 2018 Share Posted November 17, 2018 5 hours ago, rhahgleuhargh said: I just uncheck or hide them after WU analyze. I have experimented for a few hours as this is very time consuming. From what I discovered through my testing and googling the issue I would think the issue is with getting defender updates through the WUD service. There is a M$ website (security portal) where you can DL the latest definitions as per your OS. When executing that file it works silently, no progress bar etc. starting defender shows that it has the latest update (that site updates daily) and a subsequent WUD check for updates no longer lists defender as an important update. I'm very surprised no one else has come across this issue. Seems like a WU issue, not our installation(s). regards... Quote Link to comment Share on other sites More sharing options...
Thiersee Posted November 17, 2018 Share Posted November 17, 2018 @rhahgleuhargh Hi, can you remember that old IE11-Update KB3185319 asked every time by WU on MY x86 VM? I discovered yesterday (because of another issue) that it happens ONLY if I install on a 32bit processor (a 32bit VM is a 32bit processor); if I install exactly the same x86-ISO on a 64bit VM it will NOT be requested by WU. Three time I tried a new installation on a new formatted VM and every time I got the request, if the guest processor (the VM) was 32bit. Mystery of MS..... Have a nice sunday Quote Link to comment Share on other sites More sharing options...
pennsylvaniaron Posted November 19, 2018 Share Posted November 19, 2018 Still no progress on why defender definitions no longer work through WU. I DL a file named MPAS-FE.exe which are the defender definitions file and have it placed on the desktop via WTK. If I execute this file it will update the definitions as of the date of that file. Till this issue is resolved I will have to update in this fashion so WU no longer will ask for defender definitions files. I don't know what happens when definitions are to be updated again, which is frequently. If before I execute that file and try to update via defender itself, that also gives an error and will not update. I tried different scenarios of making the iso including NO tweaks to NO silents except kb4099950, NFW and telemetry. Will report back if and when resolved. ps...while googling this issue many others have also had it. Some said it was MS and they fixed the server... regards... Quote Link to comment Share on other sites More sharing options...
mooms Posted November 19, 2018 Share Posted November 19, 2018 Je viens de me rendre compte que j'ai un bug avec l'image Windows 7 x64 que j'ai créée le mois dernier: l'observateur d'événements ne fonctionne pas. Bug confirmé en réel et en virtuel, j'ai même viré tous les tweaks que j'applique pour voir si ça ne viendrait pas de là, niet. Il y a une solution: il faut créer le dossier %SystemRoot%\System32\winevt\logs et donner les droits maximum (contrôle total) au service EventLog. Source: https://support.microsoft.com/en-us/help/971256/error-message-when-attempting-to-start-the-windows-event-log-service-a Reste à comprendre comment le bug s'est produit: intégration foireuse, bug de WTK, bug d'une des KB ? Je vais refaire une intégration avec l'UL de ce mois-ci, en attendant, j'aimerais bien que ceux lisant ce message testent si l'observateur d'événements fonctionne chez eux. Autre truc qui n'a rien à voir: j'ai remarqué que WUD télécharge à nouveau les KB, même si il les détecte comme présents. Pas grave, j'ai la fibre, mais cette fonction est buggée. la suppression des KB fonctionne par contre. Quote Link to comment Share on other sites More sharing options...
mooms Posted November 19, 2018 Share Posted November 19, 2018 Même problème avec l'UL de ce mois-ci. Aucune idée de l'origine du problème... Quote Link to comment Share on other sites More sharing options...
pennsylvaniaron Posted November 19, 2018 Share Posted November 19, 2018 6 minutes ago, mooms said: Same problem with UL this month. No idea of the origin of the problem ... mooms, I went to ctrl panel, admin tools, clicked on event viewer. the overall and summary screen opens. I don't see any errors with it. I assume its working... regards... Quote Link to comment Share on other sites More sharing options...
mooms Posted November 20, 2018 Share Posted November 20, 2018 Thank your for having checked pennsylvaniaron. Could you post (attach) the ini file of your last session from WinToolkit ? It could help me to find the issue. I've attached mine, if anyone can check and spot any hint: 2018-11-19_22-39-PM.zip Quote Link to comment Share on other sites More sharing options...
Thiersee Posted November 20, 2018 Share Posted November 20, 2018 On 10/15/2018 at 7:37 PM, pennsylvaniaron said: ..... and I have 3 updates (also mrt and defender total 5). Using convenience method. 4041083 (18.9mb) 4049016 (18.9mb) 3185319 (52.1mb) Why am I getting this on a _64 install? ....... Hi Ron, ask me not how and why, but I get the same 3 update requested if I install W7 HomePremium on my very old laptop with AMD Turion; yes exactly that laptop where I couldn't install after January 2018 and I wrote I can install only with UL until 12.12.2017. I don't know why or what happened in the mean time with MS and WU, but now it's possible with the actual UL, but I get the 3 update; the first two are both KB4040980 (with installing this one they disappears both). If I install with the UL 12.12.2017 and start WU I get only kb4457918 (only 23 MB, it is kb4457044) and the last cumulative kb4467107 and kb4467240 requested. Quote Link to comment Share on other sites More sharing options...
pennsylvaniaron Posted November 21, 2018 Share Posted November 21, 2018 mooms: *AIO|v1.6.0.11|2018-11-15_10-34-AM #Options Compatibility Check Failed Updates to Silent Installers Integrate 'HDC' Drivers (boot.wim) Integrate 'SCSIADAPTER' Drivers (boot.wim) Integrate 'SYSTEM' Drivers (boot.wim) Move Known Problem Updates to Silent Installers Prepare Drivers Prompt Addons Prompt Drivers Prompt Gadgets Prompt Silent Prompt Themes Prompt Updates Prompt Wallpapers Rebuild Image Remove Invalid Drivers Retry Updates #Files Microsoft Toolkit 2.6.4.exe::D:\Win Toolkit\Microsoft Toolkit 2.6.4.exe;%SystemDrive%\users\public\desktop\Microsoft Toolkit 2.6.4.exe;True TeamViewerQS.exe::D:\Win Toolkit\TeamViewerQS.exe;%SystemDrive%\users\public\desktop\TeamViewerQS.exe;True #Silent Installs KB4099950::N/A (Not Needed);NO;203.14 KB;D:\Win Toolkit\UL Updates_64\5-Windows6.1-KB4099950-x64.msu;Always Installed Acrobat Reader v.2019.008.20081::;YES;387.91 MB;D:\Win Toolkit\adobe reader v.DC mst file 2019.008.20081\setup.exe;Always Installed Flash Player v.31.0.0.148_active::/passive /norestart;NO;20.87 MB;D:\Win Toolkit\install_flash_player_31_active_x_31.0.0.148.msi;Always Installed Flash Player v.31.0.0.148_plugin::/passive /norestart;NO;21.37 MB;D:\Win Toolkit\install_flash_player_31_0.0.148_plugin.msi;Always Installed Ccleaner v.549.6856::/S;NO;17.23 MB;D:\Win Toolkit\ccsetup549.6856.exe;Always Installed Google Toolbar::/q;NO;4.80 MB;D:\Win Toolkit\googletoolbarinstaller_en_signed.exe;Always Installed Net Framework v.4.7.2.3221.1::;NO;46.46 MB;D:\Win Toolkit\Net Framework v.4.7.2.3221.1_Slim_x86_x64.exe;Always Installed Telemetry::;NO;55.34 KB;D:\Win Toolkit\Telemetry.exe;Always Installed #Theme Packs |D:\Win Toolkit\CommunityShowcaseNaturalLandscapes.themepack D:\Win Toolkit\CommunityShowcaseNaturalLandscapes2.themepack D:\Win Toolkit\CommunityShowcaseNaturalLandscapes3.themepack D:\Win Toolkit\CommunityShowcaseRuralLandscapes.themepack D:\Win Toolkit\CommunityShowcaseRuralLandscapes2.themepack #Tweaks Disable Language Bar Show 'Computer' on Desktop Show 'Control Panel' on Desktop Always Show Menu Bars Control Panel View::Small Icons Show All Icons on System Tray Show File Extensions Show Hidden Files & Folders Speed Up Desktop Open NFO files with notepad Word Wrap in Notepad Always Show Menu Bar Disable First Run Customize IE Homepage::www.google.com Set Google as Search Provider Run::Show Sort All Programs menu by name::Enable Disable User Account Control Disable Automatic Restart on BSOD Disable Dr Watson Disable Hibernation AV.reg::D:\Win Toolkit\AV.reg Enable_IE9_SmartScreenFilter.reg::D:\Win Toolkit\Enable_IE9_SmartScreenFilter.reg #Updates D:\Win Toolkit\UL Updates_64\IE11-Windows6.1-x64-en-us.exe D:\Win Toolkit\UL Updates_64\1-RDP-Windows6.1-KB2574819-v2-x64.msu D:\Win Toolkit\UL Updates_64\1-Windows6.1-KB2670838-x64.msu D:\Win Toolkit\UL Updates_64\1-Windows6.1-KB3020369-x64.msu D:\Win Toolkit\UL Updates_64\2-RDP-Windows6.1-KB2592687-x64.msu D:\Win Toolkit\UL Updates_64\2-RDP-Windows6.1-KB2813347-x64.msu D:\Win Toolkit\UL Updates_64\2-RDP-Windows6.1-KB2830477-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB971033-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2545698-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2547666-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2667402-v2-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2698365-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2729094-v2-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2732059-v5-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2750841-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2761217-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2773072-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2834140-v2-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2862330-v2-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2894844-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2900986-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2919469-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2970228-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB2984972-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB3006137-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB3059317-x64.msu D:\Win Toolkit\UL Updates_64\2-Windows6.1-KB3138612-x64.msu D:\Win Toolkit\UL Updates_64\3-Windows6.1-KB3125574-v4-x64.msu D:\Win Toolkit\UL Updates_64\4-Windows6.1-KB3150220-x64.msu D:\Win Toolkit\UL Updates_64\4-Windows6.1-KB3156016-x64.msu D:\Win Toolkit\UL Updates_64\4-Windows6.1-KB3159398-x64.msu D:\Win Toolkit\UL Updates_64\4-Windows6.1-KB3161102-x64.msu D:\Win Toolkit\UL Updates_64\4-Windows6.1-KB3161949-x64.msu D:\Win Toolkit\UL Updates_64\4-Windows6.1-KB3172605-x64.msu D:\Win Toolkit\UL Updates_64\4-Windows6.1-KB3179573-x64.msu D:\Win Toolkit\UL Updates_64\4-Windows6.1-KB3184143-x64.msu D:\Win Toolkit\UL Updates_64\4-Windows6.1-KB4019990-x64.msu D:\Win Toolkit\UL Updates_64\4-Windows6.1-KB4457044-x64.msu D:\Win Toolkit\UL Updates_64\4-Windows6.1-KB4459934-x64.msu D:\Win Toolkit\UL Updates_64\4-Windows6.1-KB4467107-x64.msu D:\Win Toolkit\UL Updates_64\5-Windows6.1-KB2685811-x64.msu D:\Win Toolkit\UL Updates_64\5-Windows6.1-KB2685813-x64.msu D:\Win Toolkit\UL Updates_64\5-Windows6.1-KB2603229-x64.msu D:\Win Toolkit\UL Updates_64\5-Windows6.1-KB3046269-x64.msu D:\Win Toolkit\UL Updates_64\5-Windows6.1-KB3177467-v2-x64.msu regards... Quote Link to comment Share on other sites More sharing options...
rhahgleuhargh Posted November 21, 2018 Author Share Posted November 21, 2018 (edited) @mooms Aucun pb ici avec l'observateur d'évènement (VM 7 pro x64). Pour les réglages des WTK, outre les mises à jour via Convenience Rollup Pack, 7zip, DNF 4.7.2 maskMRT et le pack RunOnce d'icare, Telemetry.exe (soit en setupcomplete.cmd, soit avec WTKinstaller), j'ai mis uniquement ces tweaks : Add 'Take Ownership' to context-menu Show 'Computer' on Desktop Show User Folder on Desktop Small Taskbar Icons Remove Shortcut Arrow Remove Shortcut Suffix Show File Extensions Show Hidden Files & Folders Open NFO files with notepad Peut-être est-ce que c'est lié au fait que tu aies désactivé le rapport d'erreur de Windows ? Edited November 21, 2018 by rhahgleuhargh Quote Link to comment Share on other sites More sharing options...
rhahgleuhargh Posted November 21, 2018 Author Share Posted November 21, 2018 @pennsylvaniaron Bug with Windows Defender updates confirmed. I have no explanation. Quote Link to comment Share on other sites More sharing options...
pennsylvaniaron Posted November 21, 2018 Share Posted November 21, 2018 5 hours ago, rhahgleuhargh said: @pennsylvaniaron Bug with Windows Defender updates confirmed. I have no explanation. thanks rhahgleuhargh. It's a relief to know its not my installation. I can now stop testing and wasting time. There must be a way to alert M$ of this problem? In the meantime I will continue to incorporate the mpas-fe.exe file in the iso and place it on the desktop. regards Quote Link to comment Share on other sites More sharing options...
Thiersee Posted November 21, 2018 Share Posted November 21, 2018 @pennsylvaniaron & @rhahgleuhargh Just an idea to this bug ! I'm playing with Win10 and I don't know, if it's the same Defender as for Win7: I see 2 KBs in the history of installed updates, that belong to Windows Defender, KB4052623 (Definitionsupdate für Windows Defender Antivirus) and KB4052623 (Update für Windows Defender Antivirus-Antischadsoftwareplattform); you speak only about definitions updates, but could be possible that the update for the plattform is missing? Quote Link to comment Share on other sites More sharing options...
pennsylvaniaron Posted November 21, 2018 Share Posted November 21, 2018 no its kb915597. as of today the definition file is 1.281.414.0 if you google microsoft security portal choose the hit that says get the latest definitions. on that page are all the security definitions for different versions of windows. regards... Quote Link to comment Share on other sites More sharing options...
mooms Posted November 21, 2018 Share Posted November 21, 2018 9 hours ago, rhahgleuhargh said: Peut-être est-ce que c'est lié au fait que tu aies désactivé le rapport d'erreur de Windows ? Non je ne pense pas, c'est un tweak que j'utilise depuis des années, et le bug n'es apparu que récemment. Quote Link to comment Share on other sites More sharing options...
pennsylvaniaron Posted November 22, 2018 Share Posted November 22, 2018 3 hours ago, mooms said: No I do not think so, it's a tweak I've been using for years, and the bug only appeared recently. mooms, think hard if you are using any new software, or any other changes you may have made to the host computer, RECENTLY. I installed cryptoprevent software that protects against the cryptolocker virus. I had its protection 1 higher protection level than default. I could not install a piece of software for 3 weeks and could not figure it out. Then I remembered the cryptoprevent program that I started using months prior. Since its invisible, runs in the background, I forgot all about it. I changed the protection to default (which is what I use now) and that problem software installed easily. I hadn't used that crypto software in awhile. I just started using it again because I got hit with a variation of the cryptolocker virus. Worse virus I've ever encountered. I have my main HD and 2 clones in my case. This virus spreads to the backup clones also. it encrypts all docs, jpgs, mp3, pdf's and holds them for ransom. For some reason it also encrypted my entire wintoolkit folder with all the files I use to make the iso. That was a killer. I also have 45gb of family pics, irreplaceable! There is no known cure or decryption key. I luckily also clone my main drive to an external (if you dont disconnect it from usb it will also spread to the external. I heard it will also spread to the cloud but not sure on that, because I dont use the cloud.) After I clone to the external (about every 3 weeks) I disconnect from usb and store it in my desk drawer. I thought my defender definition problem was related to the fact that I am using cryptoprevent again, RECENTLY. I disabled it but apparently that's not the cause... regards... Quote Link to comment Share on other sites More sharing options...
rhahgleuhargh Posted December 12, 2018 Author Share Posted December 12, 2018 Hello, Changelog du mois : Security Monthly Quality Rollup : KB4471318 remplace KB4467107 DNF3.5.1 : KB4470641 remplace KB4459934 et KB4457044 ULs uploadées. Quote Link to comment Share on other sites More sharing options...
Thiersee Posted December 12, 2018 Share Posted December 12, 2018 @rhahgleuhargh There is an error in the UL x64: KB4470637 (NET-FW 4.5.2) instead of KB4470641 (NET-FW 3.5.1)! <!-- 2018 --> <update id="KB4470637" category="2" publishdate="2018-12-12" article="http://support.microsoft.com/kb/4470637"> <title>KB4470637 - MAJ pour Microsoft .NET Framework 3.5.1 sous Windows 7 SP1 x64</title> <description>Security and Quality Rollup for .NET Framework 3.5.1.</description> <filename>4-Windows6.1-KB4470637-x64.msu</filename> <url>http://download.windowsupdate.com/d/msdownload/update/software/secu/2018/12/ndp45-kb4470637-x64_3a008835532612473c1b6ad89ab15c324b66c0f9.exe</url> </update> x86 is OK. rhahgleuhargh 1 Quote Link to comment Share on other sites More sharing options...
rhahgleuhargh Posted December 12, 2018 Author Share Posted December 12, 2018 Exact, my x64 test just crashed.... ULs reuploaded (I modified the x64 UL date). Sorry ! Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.