Defender update frequency normal?

ddelo said:

I think this is not a bug, but a source selection of each application.

The timestamp for all updates (including Windows Defender ones), might come from two sources.

1. If the timestamp is taken from the Windows Update database, it's in UTC.
2. If the timestamp is taken from the event logs, it's in PC Local time.

Please take a look at the end of this post [url="https://www.tenforums.com/tutorials/5472-view-windows-update-history-windows-10-a-2.html#post1516677"]View Windows Update History in Windows 10 - Page 2 - | Tutorials[/url

@ddelo -- many thanks for the information. What was confusing is that all the timestamps in 1803 were always right on the money with my local time. If MS purposely changed things in 1809, that would explain it. And, so far, no Windows Module Installer restore point when WD verification task runs. Fingers crossed.

Crizal said:

@Mcd73165 -- Hello Mark. Some good news and I hope it holds. Windows Defender ran the verification task last night at 8:58PM and for the second consecutive time, there was no Windows Module Installer restore point set. Is it finally fixed? Time will tell.

Hi, Crizal. Task ran for the 2nd time here as well with no Windows Module Installer restore point set. Seems like it's finally fixed but with MS who knows for sure. Sorry about any issues you have with version 1809. Take care.
Mark

Mcd73165 said:

Hi, Crizal. Task ran for the 2nd time here as well with no Windows Module Installer restore point set. Seems like it's finally fixed but with MS who knows for sure. Sorry about any issues you have with version 1809. Take care.
Mark

Hello Mark. Looking good for Defender and the restore point issue. 1809 is working okay. I was sort of confused about the timestamp in the program but thanks to @ddelo and the information he provided, it's all cool.

Everything looks good here, they finally fixed it!

Looks fixed here too!

Crizal said:

Hello Mark. Looking good for Defender and the restore point issue. 1809 is working okay.

So is 1803. Both my 1803 build 17134.471 and 1809 build 17763.194 machines have downloaded definition updates without creating restore points.

@Ztruker not sure if this applies to your verification situation, but on my machines, every time there's a new Defender version installed into a new platform folder like it created 3 days ago:

C:/ProgramData/Microsoft/Windows Defender/Platform/4.18.1812.3-0/


Windows will recreate and restart the 4 Defender tasks in the scheduler to include this latest folder path to the executables.

For me, it means I always have to go in and disable the Windows scan task as I have my own custom scan that is more reliable and on time and needs to be updated with this newest path.