Windows Defender
Page 1 of 1
human_steel




Posts: 33269

PostPosted: Sat, 9th Mar 2013 20:23    Post subject: Windows Defender
It suddenly started failing when doing a scan (either a full or quick one) today. Out of nowhere. It says its service has stopped working - tried putting it on Automatic via Services, but to no avail. Scanned with Malwarebytes for beautiful creatures, but nothing was found (even did a scan with Kaspersky AV 2013 - same results). Restarted the machine and it also didn't help.

I'm guessing it's because of a faulty virus definition package judging by this thread: http://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning/windows-defender-terminates-during-scan/ab58c85a-f8b7-467a-8ff2-ebae663a3e47?page=1

All posts on March 9th contain the same issue as I'm having right now. Can someone with Windows 8 try updating the definitions and running a quick scan and report back?
Back to top
manu_xl




Posts: 881

PostPosted: Sat, 9th Mar 2013 20:58    Post subject:
windoze Reaction
Back to top
human_steel




Posts: 33269

PostPosted: Sat, 9th Mar 2013 21:06    Post subject:
Rolling Eyes
Back to top
ManMountain




Posts: 793

PostPosted: Sat, 9th Mar 2013 21:18    Post subject:
Yeah, it's broken for me in Windows 8.
Back to top
human_steel




Posts: 33269

PostPosted: Sat, 9th Mar 2013 21:31    Post subject:
Yep, seems it's an issue with the definitions database. Let's see if there will be an update needed or simply a new virus-definitions package to get this problem fixed.
Back to top
ManMountain




Posts: 793

PostPosted: Sat, 9th Mar 2013 21:35    Post subject:
I tried updating to "The latest virus definition version is: 1.145.1465.0 | Released: Mar 09, 2013 07:57 PM UTC" via https://www.microsoft.com/security/portal/definitions/howtowd.aspx but the WD service is still failing.

As you said, just have to wait on an update or definition to fix it.
Back to top
fisk




Posts: 9145
Location: Von Oben
PostPosted: Sun, 10th Mar 2013 00:15    Post subject:
Running just fine here.
Could it be that you fellows did not purchase your copies of Win8?


Yes, yes I'm back.
Somewhat.
Back to top
human_steel




Posts: 33269

PostPosted: Sun, 10th Mar 2013 00:28    Post subject:
Back to top
sausje
Banned



Posts: 17716
Location: Limboland, Netherlands
PostPosted: Sun, 10th Mar 2013 00:32    Post subject:
No issues here so far with it, running the win8 x64 pro media center Neutral


Proud member of Frustrated Association of International Losers Failing Against the Gifted and Superior (F.A.I.L.F.A.G.S)
Back to top
human_steel




Posts: 33269

PostPosted: Sun, 10th Mar 2013 00:35    Post subject:
Version of definitions?
Back to top
sausje
Banned



Posts: 17716
Location: Limboland, Netherlands
PostPosted: Sun, 10th Mar 2013 00:42    Post subject:


I know it's saying "at risk" but that's because it detected those steam crack files and had to disable real-time protection.


Proud member of Frustrated Association of International Losers Failing Against the Gifted and Superior (F.A.I.L.F.A.G.S)
Back to top
human_steel




Posts: 33269

PostPosted: Sun, 10th Mar 2013 00:47    Post subject:
Can you revert to WD's default settings, update to the latest definitions and try again? I've also noticed, as other people too in those threads, that it can turn off its service when it surpasses 80000 scanned files (when definitions above 1.145.1429.0 are installed) . Cause now I ran a Custom scan in the smallest partition I had and it all passed without problems.
Back to top
sausje
Banned



Posts: 17716
Location: Limboland, Netherlands
PostPosted: Sun, 10th Mar 2013 00:51    Post subject:
Hmm if i use default, shitloads will prolly get deleted. So if you don't mind, i rather not Razz


Proud member of Frustrated Association of International Losers Failing Against the Gifted and Superior (F.A.I.L.F.A.G.S)
Back to top
ManMountain




Posts: 793

PostPosted: Sun, 10th Mar 2013 10:39    Post subject:
fisk wrote:
Running just fine here.
Could it be that you fellows did not purchase your copies of Win8?


It's odd some folk are affected and others not. My Win 8 Pro x64 with Media Centre is legit.


sausje wrote:
I know it's saying "at risk" but that's because it detected those steam crack files and had to disable real-time protection.


It's saying "at risk" because by disabling real time protection you are. Why not just add those files to the excluded list?

Anyhow, still not working for me Sad
Back to top
sausje
Banned



Posts: 17716
Location: Limboland, Netherlands
PostPosted: Sun, 10th Mar 2013 11:37    Post subject:
ManMountain wrote:
sausje wrote:
I know it's saying "at risk" but that's because it detected those steam crack files and had to disable real-time protection.


It's saying "at risk" because by disabling real time protection you are. Why not just add those files to the excluded list?

Anyhow, still not working for me Sad


Because, unlike 99% of the people, i didn't had a single virus in the last ~9 years.
If you have the proper sources and you know what the fuck you are doing, catching a virus is very rare. I rather have no AV on tbh...
That's for people that don't pay attention and try out everything that gets thrown at them..


Proud member of Frustrated Association of International Losers Failing Against the Gifted and Superior (F.A.I.L.F.A.G.S)
Back to top
ManMountain




Posts: 793

PostPosted: Sun, 10th Mar 2013 12:17    Post subject:
Sorry but having "proper sources" and your own personal spider sense isn't a form of protection.

Personally, I just like to have a scanner running, offers me some peace of mind.
Back to top
sausje
Banned



Posts: 17716
Location: Limboland, Netherlands
PostPosted: Sun, 10th Mar 2013 12:19    Post subject:
ManMountain wrote:
Sorry but having "proper sources" and your own personal spider sense isn't a form of protection.


Why not? I do a manual scan now and then, and NEVER had a single virus.
So i beg to differ to your opinion there. Smile


Proud member of Frustrated Association of International Losers Failing Against the Gifted and Superior (F.A.I.L.F.A.G.S)
Back to top
ManMountain




Posts: 793

PostPosted: Sun, 10th Mar 2013 12:25    Post subject:
I'll give you an example. Let's pretend your taking a break from some Delphi coding and are up for some video converting and opt to use Xilisoft.Video.Converter.Ultimate.v7.6.0.20121127.Incl.Keygen-BRD, released 2012-12-14.

So you've installed it, generated a key and now your actually infected with Win32.Induc.A. So where you've sourced the release, combined with your spider sense would both have failed.

I realise this scenario won't probably apply to you, but it's an example to illustrate.

Still, 9 years and to not encounter a single virus is impressive Smile
Back to top
human_steel




Posts: 33269

PostPosted: Sun, 10th Mar 2013 12:32    Post subject:
More and more people are entering the pool of affected users judging by the increasing number of threads in MS's forums. At least, I'm glad it's not a problem on my end. MS just screwed something over with those new definitions.

And, saus, did you run a scan with the latest definitions or you just launched WD a single time? Because the program works, its real-time protection works, it only fails when you're scanning something with lots of files on it.
Back to top
ManMountain




Posts: 793

PostPosted: Sun, 10th Mar 2013 12:44    Post subject:
By WD being disabled on scanning, what was concerning me was that it could be some new form of Win32/Sirefef but judging by the feedback on various threads, it would appear it's a glitch on MS's end.

I've gone as far as installing NOD32 and doing a complete scan over 11TB of data and my system is clean. As a temporary measure until the WD issue is resolved, I've enabled defense+ on Comodo for now.
Back to top
sausje
Banned



Posts: 17716
Location: Limboland, Netherlands
PostPosted: Sun, 10th Mar 2013 12:49    Post subject:
human_steel wrote:
And, saus, did you run a scan with the latest definitions or you just launched WD a single time? Because the program works, its real-time protection works, it only fails when you're scanning something with lots of files on it.


trying now a quick scan aaaaaaaaaaaand it's broken indeed.



Proud member of Frustrated Association of International Losers Failing Against the Gifted and Superior (F.A.I.L.F.A.G.S)
Back to top
human_steel




Posts: 33269

PostPosted: Sun, 10th Mar 2013 12:58    Post subject:
^ Yep, same exact error and behavior. You can restart the service, but it will get shut down if a scan is in progress.
ManMountain wrote:
I've gone as far as installing NOD32 and doing a complete scan over 11TB of data and my system is clean. As a temporary measure until the WD issue is resolved, I've enabled defense+ on Comodo for now.

I also checked for viruses and came up clean. I even used a third AV program in the face of NOD32, but nothing suspicious emerged.
Back to top
human_steel




Posts: 33269

PostPosted: Sun, 10th Mar 2013 13:14    Post subject:
Good news, the new definitions 1.145.1490.0 seem to have fixed the problem on my end. Ran 2 times a Quick scan and 1 time a Full one, and they completed successfully.

I hope there are no future definitions that break up things like that. And it's also good that a simple definitions package fixed the issue and it wasn't anything wrong with the AV module itself. Very Happy
Back to top
sausje
Banned



Posts: 17716
Location: Limboland, Netherlands
PostPosted: Sun, 10th Mar 2013 13:24    Post subject:
1490?



(i just checked for new update before taking the SS)

Seems btw, they they already updated last night, but still didn't manage to fix it Laughing


Proud member of Frustrated Association of International Losers Failing Against the Gifted and Superior (F.A.I.L.F.A.G.S)
Back to top
human_steel




Posts: 33269

PostPosted: Sun, 10th Mar 2013 13:26    Post subject:
http://www.microsoft.com/security/portal/definitions/adl.aspx

They haven't distributed the update throughout all their server farms yet. It'll pop up in an hour or two, if you insist on it updating through its updater. Smile
Back to top
sausje
Banned



Posts: 17716
Location: Limboland, Netherlands
PostPosted: Sun, 10th Mar 2013 13:28    Post subject:
human_steel wrote:
http://www.microsoft.com/security/portal/definitions/adl.aspx

They haven't distributed the update throughout all their server farms yet. It'll pop up in an hour or two, if you insist on it updating through its updater. Smile


Thanks, and yep. solved the problem. No more worries for you Razz


Proud member of Frustrated Association of International Losers Failing Against the Gifted and Superior (F.A.I.L.F.A.G.S)
Back to top
ManMountain




Posts: 793

PostPosted: Sun, 10th Mar 2013 14:24    Post subject:
Yay, with 1.145.1493.0 applied it's working again Smile
Back to top
Page 1 of 1 All times are GMT + 1 Hour
NFOHump.com Forum Index - Applications
Signature/Avatar nuking: none (can be changed in your profile)  


Display posts from previous:   

Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB 2.0.8 © 2001, 2002 phpBB Group