---------------------------------------------------------------------------------- Command: MpSigStub.exe /program "C:\Windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-deb323c3.exe" /q WD Start time: 8/1/2015 11:36 PM (version 11.1.5128.0) =================================== ProductSearch ================================== Windows Defender: Status: Active Product: 4.8.10130.0 Engine: 1.1.11903.0 Signatures: 1.203.421.0 NIS Engine: 2.1.11804.0 NIS Signatures: 115.5.0.0 ================================ PackageDiscovery ================================ Package files discovered: d:\bb961078ba978b0e8e09a6ff\mpasdlta.vdm (1.203.1011.0) d:\bb961078ba978b0e8e09a6ff\mpavdlta.vdm (1.203.1011.0) AM Delta: Engine: Not included AS base VDM: Not included AV base VDM: Not included AS delta VDM: 1.203.1011.0 AV delta VDM: 1.203.1011.0 ================================= MpUpdateEngine ================================= Package files for the engine update: d:\bb961078ba978b0e8e09a6ff\mpasdlta.vdm (1.203.1011.0) d:\bb961078ba978b0e8e09a6ff\mpavdlta.vdm (1.203.1011.0) Updated from d:\bb961078ba978b0e8e09a6ff (0x0) ================================= ValidateUpdate ================================= MpSigStub successfully updated Windows Defender using the AM Delta package. Original: Updated to: AS delta VDM: 1.203.421.0 1.203.1011.0 AV delta VDM: 1.203.421.0 1.203.1011.0 ERROR 0x80070005 : MpConfigSetValue(DeltaUpdateFailure) ERROR 0x80070005 : UtilRegOpenKey64(SOFTWARE\Microsoft\Windows Defender\Miscellaneous Configuration) ERROR 0x80070005 : MpConfigSetValue(BddUpdateFailure) ERROR 0x80070005 : UtilRegOpenKey64(SOFTWARE\Microsoft\Windows Defender\Miscellaneous Configuration) End time: 8/1/2015 11:38 PM ---------------------------------------------------------------------------------- ---------------------------------------------------------------------------------- Command: d:\a41869098a1ed2d55a85b322d0\mpsigstub.exe /q WD Start time: 8/1/2015 11:38 PM (version 11.1.5020.0) =================================== ProductSearch ================================== Windows Defender: Status: Active Product: 4.8.10130.0 Engine: 1.1.11903.0 Signatures: 1.203.1011.0 NIS Engine: 2.1.11804.0 NIS Signatures: 115.5.0.0 ================================ PackageDiscovery ================================ Package files discovered: d:\a41869098a1ed2d55a85b322d0\115.0.0.0_to_115.6.0.0_NISfull.vdm_source_NISbase.vdm._p (?.?.?.?) d:\a41869098a1ed2d55a85b322d0\nisbase.vdm (115.0.0.0) d:\a41869098a1ed2d55a85b322d0\gapaengine.dll (2.1.11804.0) NIS Full: NIS engine: 2.1.11804.0 NIS base VDM: 115.0.0.0 NIS full VDM: 115.6.0.0 ================================ PatchApplication ================================ Patched nisfull.vdm to 115.6.0.0 ================================= MpUpdateEngine ================================= Package files for the engine update: d:\a41869098a1ed2d55a85b322d0\115.0.0.0_to_115.6.0.0_NISfull.vdm_source_NISbase.vdm._p (?.?.?.?) d:\a41869098a1ed2d55a85b322d0\nisbase.vdm (115.0.0.0) d:\a41869098a1ed2d55a85b322d0\nisfull.vdm (115.6.0.0) d:\a41869098a1ed2d55a85b322d0\gapaengine.dll (2.1.11804.0) Updated from d:\a41869098a1ed2d55a85b322d0 (0x0) ================================= ValidateUpdate ================================= MpSigStub successfully updated Windows Defender using the NIS Full package. Original: Updated to: NIS engine: 2.1.11804.0 2.1.11804.0 NIS base VDM: 115.0.0.0 115.0.0.0 NIS full VDM: 115.5.0.0 115.6.0.0 ERROR 0x80070005 : MpConfigSetValue(NISDeltaUpdateFailure) ERROR 0x80070005 : UtilRegOpenKey64(SOFTWARE\Microsoft\Windows Defender\Miscellaneous Configuration) Deleted d:\a41869098a1ed2d55a85b322d0\115.0.0.0_to_115.6.0.0_NISfull.vdm_source_NISbase.vdm._p Deleted d:\a41869098a1ed2d55a85b322d0\gapaengine.dll End time: 8/1/2015 11:38 PM ---------------------------------------------------------------------------------- ---------------------------------------------------------------------------------- Command: d:\17b76b3ff5ba5d53f6c5d770fcdb0097\mpsigstub.exe /q WD Start time: 8/19/2015 12:09 AM (version 11.1.5020.0) =================================== ProductSearch ================================== Windows Defender: Status: Active Product: 4.8.10130.0 Engine: 1.1.11903.0 Signatures: 1.203.1719.0 NIS Engine: 2.1.11804.0 NIS Signatures: 115.6.0.0 ================================ PackageDiscovery ================================ Package files discovered: d:\17b76b3ff5ba5d53f6c5d770fcdb0097\115.0.0.0_to_115.10.0.0_NISfull.vdm_source_NISbase.vdm._p (?.?.?.?) d:\17b76b3ff5ba5d53f6c5d770fcdb0097\nisbase.vdm (115.0.0.0) d:\17b76b3ff5ba5d53f6c5d770fcdb0097\gapaengine.dll (2.1.11804.0) NIS Full: NIS engine: 2.1.11804.0 NIS base VDM: 115.0.0.0 NIS full VDM: 115.10.0.0 ================================ PatchApplication ================================ Patched nisfull.vdm to 115.10.0.0 ================================= MpUpdateEngine ================================= Package files for the engine update: d:\17b76b3ff5ba5d53f6c5d770fcdb0097\115.0.0.0_to_115.10.0.0_NISfull.vdm_source_NISbase.vdm._p (?.?.?.?) d:\17b76b3ff5ba5d53f6c5d770fcdb0097\nisbase.vdm (115.0.0.0) d:\17b76b3ff5ba5d53f6c5d770fcdb0097\nisfull.vdm (115.10.0.0) d:\17b76b3ff5ba5d53f6c5d770fcdb0097\gapaengine.dll (2.1.11804.0) Updated from d:\17b76b3ff5ba5d53f6c5d770fcdb0097 (0x0) ================================= ValidateUpdate ================================= MpSigStub successfully updated Windows Defender using the NIS Full package. Original: Updated to: NIS engine: 2.1.11804.0 2.1.11804.0 NIS base VDM: 115.0.0.0 115.0.0.0 NIS full VDM: 115.6.0.0 115.10.0.0 ERROR 0x80070005 : MpConfigSetValue(NISDeltaUpdateFailure) ERROR 0x80070005 : UtilRegOpenKey64(SOFTWARE\Microsoft\Windows Defender\Miscellaneous Configuration) Deleted d:\17b76b3ff5ba5d53f6c5d770fcdb0097\115.0.0.0_to_115.10.0.0_NISfull.vdm_source_NISbase.vdm._p Deleted d:\17b76b3ff5ba5d53f6c5d770fcdb0097\gapaengine.dll End time: 8/19/2015 12:09 AM ---------------------------------------------------------------------------------- ---------------------------------------------------------------------------------- Command: MpSigStub.exe /program "C:\Windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-8a2c56a6.exe" /q WD Start time: 9/4/2015 1:06 AM (version 11.1.5128.0) =================================== ProductSearch ================================== Windows Defender: Status: Active Product: 4.8.10130.0 Engine: 1.1.11903.0 Signatures: 1.203.2586.0 NIS Engine: 2.1.11804.0 NIS Signatures: 115.10.0.0 ================================ PackageDiscovery ================================ Package files discovered: d:\3c64c98182d667ba8fa94d5a11\mpengine.dll._p (?.?.?.?) d:\3c64c98182d667ba8fa94d5a11\mpasbase.vdm._p (?.?.?.?) d:\3c64c98182d667ba8fa94d5a11\mpavbase.vdm._p (?.?.?.?) d:\3c64c98182d667ba8fa94d5a11\mpasdlta.vdm (1.205.1521.0) d:\3c64c98182d667ba8fa94d5a11\mpavdlta.vdm (1.205.1521.0) AM BDE: Engine: ?.?.?.? AS base VDM: ?.?.?.? AV base VDM: ?.?.?.? AS delta VDM: 1.205.1521.0 AV delta VDM: 1.205.1521.0 ================================ PatchApplication ================================ Patched mpengine.dll to 1.1.12002.0 Patched mpasbase.vdm to 1.205.0.0 Patched mpavbase.vdm to 1.205.0.0 ================================= MpUpdateEngine ================================= Package files for the engine update: d:\3c64c98182d667ba8fa94d5a11\mpengine.dll._p (?.?.?.?) d:\3c64c98182d667ba8fa94d5a11\mpasbase.vdm._p (?.?.?.?) d:\3c64c98182d667ba8fa94d5a11\mpavbase.vdm._p (?.?.?.?) d:\3c64c98182d667ba8fa94d5a11\mpasbase.vdm (1.205.0.0) d:\3c64c98182d667ba8fa94d5a11\mpasdlta.vdm (1.205.1521.0) d:\3c64c98182d667ba8fa94d5a11\mpavbase.vdm (1.205.0.0) d:\3c64c98182d667ba8fa94d5a11\mpavdlta.vdm (1.205.1521.0) d:\3c64c98182d667ba8fa94d5a11\mpengine.dll (1.1.12002.0) Updated from d:\3c64c98182d667ba8fa94d5a11 (0x0) ================================= ValidateUpdate ================================= MpSigStub successfully updated Windows Defender using the AM BDE package. Original: Updated to: Engine: 1.1.11903.0 1.1.12002.0 AS base VDM: 1.203.0.0 1.205.0.0 AV base VDM: 1.203.0.0 1.205.0.0 AS delta VDM: 1.203.2586.0 1.205.1521.0 AV delta VDM: 1.203.2586.0 1.205.1521.0 ERROR 0x80070005 : MpConfigSetValue(DeltaUpdateFailure) ERROR 0x80070005 : UtilRegOpenKey64(SOFTWARE\Microsoft\Windows Defender\Miscellaneous Configuration) ERROR 0x80070005 : MpConfigSetValue(BddUpdateFailure) ERROR 0x80070005 : UtilRegOpenKey64(SOFTWARE\Microsoft\Windows Defender\Miscellaneous Configuration) Deleted d:\3c64c98182d667ba8fa94d5a11\mpengine.dll._p Deleted d:\3c64c98182d667ba8fa94d5a11\mpasbase.vdm._p Deleted d:\3c64c98182d667ba8fa94d5a11\mpavbase.vdm._p End time: 9/4/2015 1:07 AM ---------------------------------------------------------------------------------- ---------------------------------------------------------------------------------- Command: d:\9a3284ac8c3b5d5545d030\mpsigstub.exe /q WD Start time: 9/4/2015 1:07 AM (version 11.1.5020.0) =================================== ProductSearch ================================== Windows Defender: Status: Active Product: 4.8.10130.0 Engine: 1.1.12002.0 Signatures: 1.205.1521.0 NIS Engine: 2.1.11804.0 NIS Signatures: 115.10.0.0 ================================ PackageDiscovery ================================ Package files discovered: d:\9a3284ac8c3b5d5545d030\115.0.0.0_to_115.18.0.0_NISfull.vdm_source_NISbase.vdm._p (?.?.?.?) d:\9a3284ac8c3b5d5545d030\nisbase.vdm (115.0.0.0) d:\9a3284ac8c3b5d5545d030\gapaengine.dll (2.1.11804.0) NIS Full: NIS engine: 2.1.11804.0 NIS base VDM: 115.0.0.0 NIS full VDM: 115.18.0.0 ================================ PatchApplication ================================ Patched nisfull.vdm to 115.18.0.0 ================================= MpUpdateEngine ================================= Package files for the engine update: d:\9a3284ac8c3b5d5545d030\115.0.0.0_to_115.18.0.0_NISfull.vdm_source_NISbase.vdm._p (?.?.?.?) d:\9a3284ac8c3b5d5545d030\nisbase.vdm (115.0.0.0) d:\9a3284ac8c3b5d5545d030\nisfull.vdm (115.18.0.0) d:\9a3284ac8c3b5d5545d030\gapaengine.dll (2.1.11804.0) Updated from d:\9a3284ac8c3b5d5545d030 (0x0) ================================= ValidateUpdate ================================= MpSigStub successfully updated Windows Defender using the NIS Full package. Original: Updated to: NIS engine: 2.1.11804.0 2.1.11804.0 NIS base VDM: 115.0.0.0 115.0.0.0 NIS full VDM: 115.10.0.0 115.18.0.0 ERROR 0x80070005 : MpConfigSetValue(NISDeltaUpdateFailure) ERROR 0x80070005 : UtilRegOpenKey64(SOFTWARE\Microsoft\Windows Defender\Miscellaneous Configuration) Deleted d:\9a3284ac8c3b5d5545d030\115.0.0.0_to_115.18.0.0_NISfull.vdm_source_NISbase.vdm._p Deleted d:\9a3284ac8c3b5d5545d030\gapaengine.dll End time: 9/4/2015 1:07 AM ---------------------------------------------------------------------------------- ---------------------------------------------------------------------------------- Command: d:\988a0d1f77cd7033ee\mpsigstub.exe /q WD Start time: 9/27/2015 8:22 AM (version 11.1.5020.0) =================================== ProductSearch ================================== Windows Defender: Status: Active Product: 4.8.10130.0 Engine: 1.1.12002.0 Signatures: 1.205.2438.0 NIS Engine: 2.1.11804.0 NIS Signatures: 115.18.0.0 ================================ PackageDiscovery ================================ Package files discovered: d:\988a0d1f77cd7033ee\115.0.0.0_to_115.22.0.0_NISfull.vdm_source_NISbase.vdm._p (?.?.?.?) d:\988a0d1f77cd7033ee\nisbase.vdm (115.0.0.0) d:\988a0d1f77cd7033ee\gapaengine.dll (2.1.11804.0) NIS Full: NIS engine: 2.1.11804.0 NIS base VDM: 115.0.0.0 NIS full VDM: 115.22.0.0 ================================ PatchApplication ================================ Patched nisfull.vdm to 115.22.0.0 ================================= MpUpdateEngine ================================= Package files for the engine update: d:\988a0d1f77cd7033ee\115.0.0.0_to_115.22.0.0_NISfull.vdm_source_NISbase.vdm._p (?.?.?.?) d:\988a0d1f77cd7033ee\nisbase.vdm (115.0.0.0) d:\988a0d1f77cd7033ee\nisfull.vdm (115.22.0.0) d:\988a0d1f77cd7033ee\gapaengine.dll (2.1.11804.0) Updated from d:\988a0d1f77cd7033ee (0x0) ================================= ValidateUpdate ================================= MpSigStub successfully updated Windows Defender using the NIS Full package. Original: Updated to: NIS engine: 2.1.11804.0 2.1.11804.0 NIS base VDM: 115.0.0.0 115.0.0.0 NIS full VDM: 115.18.0.0 115.22.0.0 ERROR 0x80070005 : MpConfigSetValue(NISDeltaUpdateFailure) ERROR 0x80070005 : UtilRegOpenKey64(SOFTWARE\Microsoft\Windows Defender\Miscellaneous Configuration) Deleted d:\988a0d1f77cd7033ee\115.0.0.0_to_115.22.0.0_NISfull.vdm_source_NISbase.vdm._p Deleted d:\988a0d1f77cd7033ee\gapaengine.dll End time: 9/27/2015 8:22 AM ----------------------------------------------------------------------------------