False Warning - Exclimation Mark on Castle Icon in Systems Tray

[jaygreg90]

My definition version is 1.37.1.0. Two days ago, I noticed the exclamation
mark superimposed upon the castle icon in my systems tray. The message merely
suggested I check for updates. I did so only to find there were none. When I
closed out of the window, the exclamation mark remained. I can't make it go
away. Would appreciate comments on the root cause and suggestions on how to
fix the problem.

 

[Bill Sanderson]

My Windows Defender installation currently reads 1.37.579.0, so it would
appear something is amiss.

Have you gone to Windows or Microsoft Update, and done an express scan for
updates?

If not, please try this and see whether a definition update is offered, and
whether this appears to resolve the issue.

 

[jaygreg90]

I took your advice and updated the 32 version for the Defender site despite
the fact the program status window told me earlier today there were no
updates. Perhaps there were no more updates ... for the version I was using?
In any event, after updating from the site, the exclamation mark and castle
disappeared from the system tray. I then pulled Defender up from the program
list and checked the version; it updated.

I might add, Bill, that the version it updated to was not the one you have
so... . It appears the most current version - at least this Saturday
afternoon here in Ohio - is 1.37.646.0.

This raises another question, however. If my machine was telling me
everything A-OK with regard to updates but failed to notify me of a new
version... and your machine is showing an earlier version than the one I just
downloaded as well... is there perhaps a broader problem somewhere?

 

[Bill Sanderson]

There are folks from the Defender group at Microsoft who read these groups,
so your question will get read.

I seem to recall that there was an issue with a specific set of definitions
awhile back. I've been away on vacation, so my memory about the details is
hazy--I may be completely off base.

What you need to look for is a) whether a visit to WU/MU gets you the
update, and b) whether the next time there is an update pushed to
everyone--I think you can see this by posts in the announcements group
here--you get it within a reasonable amount of time.

Now--as to the absolute definition level that is current:

The most current set of definitions will always be found at
www.microsoft.com/security/portal Look in the right hand column for 32-bit
Windows Defender definitions.

The version I was reading back to you was taken from my Windows Home Server,
which updates rather conservatively--probably no more than once a day--I
really don't expect Defender to ever see anything on that box. Definitions
at the security portal may change a number of times a day. Definitions sent
via WU/MU used to be rather infrequent--perhaps every 2 weeks. I have no
tracked their frequency lately, but I'd be surprised if the average was more
frequent than weekly.

There's a significant resource requirement--both in terms of server and
distribution channel bandwidth, and in terms of CPU usage on client
machines--to distributing updates. I'm willing to trust Microsoft to get
definitions out quickly when there is an issue that requires it--and when
I'm feeling paranoid, or about to scan a new machine where I have some
suspicions, I can go to the security portal and get the latest.

So--I don't think there's a systematic problem--but if mine doesn't catch up
with or exceed yours by tomorrow, I could be convinced!

 

[jaygreg90]

Thanks for your help and insight, Bill.

There are folks from the Defender group at Microsoft who read these groups,
so your question will get read.

I seem to recall that there was an issue with a specific set of definitions
awhile back. I've been away on vacation, so my memory about the details is
hazy--I may be completely off base.

What you need to look for is a) whether a visit to WU/MU gets you the
update, and b) whether the next time there is an update pushed to
everyone--I think you can see this by posts in the announcements group
here--you get it within a reasonable amount of time.

Now--as to the absolute definition level that is current:

The most current set of definitions will always be found at
www.microsoft.com/security/portal Look in the right hand column for 32-bit
Windows Defender definitions.

The version I was reading back to you was taken from my Windows Home Server,
which updates rather conservatively--probably no more than once a day--I
really don't expect Defender to ever see anything on that box. Definitions
at the security portal may change a number of times a day. Definitions sent
via WU/MU used to be rather infrequent--perhaps every 2 weeks. I have no
tracked their frequency lately, but I'd be surprised if the average was more
frequent than weekly.

There's a significant resource requirement--both in terms of server and
distribution channel bandwidth, and in terms of CPU usage on client
machines--to distributing updates. I'm willing to trust Microsoft to get
definitions out quickly when there is an issue that requires it--and when
I'm feeling paranoid, or about to scan a new machine where I have some
suspicions, I can go to the security portal and get the latest.

So--I don't think there's a systematic problem--but if mine doesn't catch up
with or exceed yours by tomorrow, I could be convinced!

 

[Tim Clark]

Bill,

If I understand you correctly, I'm surprised at you ;-)

Windows Defender updates defs thru AU/MU usually twice a week, usually on
Tuesdays and Thursdays, and has for quite a while

Tim

Definitions sent
via WU/MU used to be rather infrequent--perhaps every 2 weeks. I have no
tracked their frequency lately, but I'd be surprised if the average was more
frequent than weekly.

--
If you set a Vista disk in the CD tray upside down,
you can hear SATANIC VOICES!
But that isn't the worst of it,
if you set it the right way IT INSTALLS VISTA!

 

[Bill Sanderson]

I'm out of date!

You've a much closer observation of Windows Defender updates than I have at
this point. For a variety of reasons, the only machines I have running
Windows Defender are several Windows Home Server machines. These have no
screens nor keyboards, and update automatically, so I don't see the update
process except incidental to some other work on them via Remote Desktop.

So--I was going by memory, and obviously it was pretty out of date.

 

[Windows Defender Exclamation Point]

My definition version is 1.37.1.0. Two days ago, I noticed the exclamation
mark superimposed upon the castle icon in my systems tray. The message merely
suggested I check for updates. I did so only to find there were none. When I
closed out of the window, the exclamation mark remained. I can't make it go
away. Would appreciate comments on the root cause and suggestions on how to
fix the problem.

 

[Windows Defender Exclamation Point]

Jay,

I'm having the same problem as you. Have you found a solution yet? HELP!