Windows Defender on Windows Server 2003 Standard x64 Edition / Upd

[Guest]

Hi everyone!

I'm trying to secure my hosted virtual Windows Server 2003 Standard x64.
WindowsDefenderX64.msi installed without problems but "Check for Updates"
returns Error Code: 0x80240022. This is understandable because Windows Update
doesn't work on this virtual server - some driver update could break the
virtualization...

So I've been trying to manually update Windows Defender and it's signatures
using the advice given by "Engel" (Windows Defender Update 1.14.1837.5). But
after running the exe-files the definition version is still 1.0.0.0... (btw:
the exe's didn't ran without error...)

Any advice on how to manually update the 64 Bit Version of Windows Defender
would greatly be appreciated!

Best regards,
Harald

 

[Bill Sanderson MVP]

As far as I am aware, the definition updates are the same files for all
versions of Defender.

When you are starting out at 1.0.0, you'll need to read Engel's messages
carefully, and perhaps go back a few to find the full details. Let me look
at his last few messages.

OK - the message heading this thread should have what you need in it--he
gives a sequence--numbered 1 and 2, of updates needed to go from 1.0.0 to
current.

You need to apply both those updates in that order to make this work.

Is that what you tried and failed with?

 

[Bill Sanderson MVP]

The other thought I have is: I'm not sure what you mean by a driver update
breaking the virtualization--in general, I'd wouldn't expect that to be a
problem. And, I'm not clear whether you've intentionally turned off
AutoUpdate, or just recognized that it isn't working--which I wouldn't
expect, myself.

If you've intentionally turned off AutoUpdate, WindowsUpdate should still be
functional, and should bring in definitions. If you do a WindowsUpdate run
and definitions are not offered, it is probably because you are missing a
prerequisite--apply all offered critical updates on an express scan, and try
again.

 

[Guest]

Is that what you tried and failed with?

Thanks for your answer! Yes, I installed the definition updates 1 und 2 in
the specified order but the Windows Defender Definition version is still
1.0.0.0.

BTW: There are two Windows Defender directories on my server:

c:\program files\windows defender (newest file mpevmsg.dll 2006/11/03 19:43
c:\program files (x86)\windows defender (newest file msmplics.dll 2006/11/03
19:40


Best regards,
Harald

 

[Guest]

After I bought my "virtual private server" (using Virtuozzo) I immediately
activated Auto Updates only to find out the hard way that AutoUpdate doesn't
work. This was confirmed later on by my hosting company (hosteurope). I can
search for updates using the Microsoft Website and install (most of them)
manually but I cannot use the automatic update feature.
I'm getting errors like "error code: 0x800704DD "

BTW: The Background Intelligent Transfer Service is running...

Best regards,
Harald

P.S.: The hosting company promised that security updates would automatically
be applied by them which is true in most cases (not for asp.net 2.0; some
delay...).

 

[Bill Sanderson MVP]

Thanks - that's a different species of "virtual server" than I was
expecting--I'm familiar with virtual Linux servers at an ISP, but hadn't met
Windows servers of this sort--I was expecting that you were running Virtual
Server 2007, perhaps, on your own machine.

This is a bit tricky--we've never managed to get a list of exactly what
updates are required for Windows Defender to work. We've suspected, but not
confirmed perfectly, that those updates which enable the machine to pass WGA
are required--so one thing to do is to download any piece of software which
requires WGA and be sure the current controls are in place. Another
prerequisite is clearly the Windows Installer 3.1, and any security updates
to that. I don't believe that any of the .NET packages is a prerequisite.
The only case of a non-critical update being a prerequisite was under
Windows 2000, so that doesn't apply--but the issue might: be sure you've
applied all available root certificate related updates.

I believe that this link:

http://download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/rootsupd.exe

leads to the current root certificate update package, but I'm not completely
certain.

So--things to try:
Make sure the machine can pass WGA by downloading something that requires
that--you may well have already done this with Defender.

Make sure Installer 3.1 is in place, and any critical updates to it.

Check that you've applied the latest root certificates update to the
machine.

Those are what I can see to try now--and perhaps you'll write back and say
those are already in place, so I can scratch my head a bit harder!


--

 

[Guest]

Thank you for your reply! The machine has passed WGA several times - e.g. for
the IE7 x64 download. All updates offered by update.microsoft.com beside the
1.14.1841.7 Windows Defender update and the KB920213 and .NET Framework 1.1
SP1 Updates are installed on the server. The version of msi.dll is
3.1.4000.2435.
I executed the rootsupd.exe and retried the manual defender updates but the
definition version is still 1.0.0.0.

Where should the updates go? (on 32 and 64 bits?) Is there a more manual way
to install the manual updates?

Best regards,
Harald


P.S.: BTW: IE 7 hangs when I return to the discussion group via a favorite
link on my client pc. I had to navigate to it manually...