MS Posts Support Note About Defender SFC /Scannow Errors

Page 1 of 3 123 LastLast

  1. Posts : 4,224
    Windows 10
       #1

    MS Posts Support Note About Defender SFC /Scannow Errors


    See this note for Microsoft's explanation of the Defender PowerShell script issue that leads SFC /scannow to return hash value mismatch errors for those files: System File Checker (SFC) incorrectly flags Windows Defender PowerShell module files as corrupted. According to this document, one needs version 4.18.1908 of the Antimalware platform to avoid this error.

    My only problem now is that some of my 1903 PCs are running version 4.18.1907. The following folders appear in C:/ProgramData/Microsoft/Windows Defender/Platform (the highest numbered item defines the current antimalware platform version, as per Ways to check your current Defender Antimalware Platform Version)

    MS Posts Support Note About Defender SFC /Scannow Errors-image.png

    Checking for updates refreshes the Security Intelligence updates just fine, but the engine number stays unchanged. Thus, I have questions:

    1. Why do some of my Win10 1903 PCs run older Antimalware platforms?
    2. Is there any way I can find and force an install of the 4.18.1908 version?

    Alas, I can't seem to find a link on the MS site to do this. Looks like another case of waiting for MS to find the famous "round tuit" (get around to it, that is). Sigh.
    --Ed--
      My Computers


  2. Posts : 915
    Windows 10 Pro 64bit 22H2 19045.3324
       #2

    EdTittel said:
    According to this document, one needs version 4.18.1908 of the Antimalware platform to avoid this error.
    Great find Ed!

    I'm encouraged that MS has updated what had previously been it's open ended announcement:

    ...Windows Defender version 4.18.1906.3 and later versions.

    to this:

    ...Windows Defender version 4.18.1906.3 and later versions up to version 4.8.1908.


    Both my machines, like yours, are still on 4.18.1907.4-0. Unfortunately, I too have never found a way to force the latest Defender platform updates, instead having to wait, eventually my machines getting them within hours usually between 3 and 4 weeks of the last one.

    Again as always, thanks for having your ear so close to the ground on this one. ;o) .
      My Computers


  3. Posts : 4,224
    Windows 10
    Thread Starter
       #3

    @Farvatten: you're welcome. Glad MS has finally acknowledged the well-known issue, and its equally well-known workaround. Now, if they would just issue that newer Antimalware platform, all would be well . . . Just for grins let me check the version on my Fast Ring Insider Preview PC: it's same release, so it hasn't made it into Preview circulation, even. Stay tuned.
    --Ed--
      My Computers


  4. Posts : 5,196
    Windows 10 Home 64bit
       #4

    Nice to get some new information on this. Many thanks @EdTittel for finding it. Earlier MS documents said a fix would be in "future releases of Windows". I just checked the Microsoft Update Catalog for KB4052623 which is the Antimalware Platform version and it's still showing 4.18.1907.4 which I'm also on. I guess we wait for Windows Update.
      My Computer


  5. Posts : 915
    Windows 10 Pro 64bit 22H2 19045.3324
       #5

    @EdTittle

    I am curious about their wording however...

    It does not say the problem occurs only with Windows Defender version 4.18.1906.3 and later versions up to but not including version 4.8.1908. And reading the statement it says the problem of hash corruption is fixed 'After this update is applied...'

    Naturally pessimistic with any MS statements, I'm wondering if it will take another cycle AFTER this one to see the fix?

    Unfortunately from experience I've found I can be overly skeptical with these things, and yet often a good thing , being pleasantly surprised when my dire predictions come up short.
      My Computers


  6. Posts : 31,601
    10 Home x64 (22H2) (10 Pro on 2nd pc)
       #6

    EdTittel said:
    See this note for Microsoft's explanation of the Defender PowerShell script issue that leads SFC /scannow to return hash value mismatch errors for those files .... According to this document, one needs version 4.18.1908 of the Antimalware platform to avoid this error.
    I've seen that document many times before, but until now it had no 'Resolution' section. That must be a very new addition, the note at the bottom say "Last Updated: 17 Aug 2019". That date being a Saturday, I suspect we'll have to wait until the working week starts in Redmond before 4.18.1908 get put up on the update servers.
      My Computers


  7. Posts : 920
    Windows 10 Pro
       #7

    And yet if you run SFC /scannow from an elevated command console it reports no error's yet Autoruns can see that certain defender files are unsigned. I assume that is the issue?
    MS Posts Support Note About Defender SFC /Scannow Errors-desk01.png
    MS Posts Support Note About Defender SFC /Scannow Errors-desk02.png
      My Computer


  8. Posts : 65
    Windows 10 Pro 1909 18363.959
       #8

    I'm at 18362.295 on my 3 PC's and they all have that 4.18.1908 folder and when sfc /scannow is run, there is no error conditions thrown up.
      My Computers


  9. Posts : 5,048
    Windows 10/11 Pro x64, Various Linux Builds, Networking, Storage, Cybersecurity Specialty.
       #9

    Very useful.

    Thanks, Ed!
      My Computer


  10. Posts : 1
    windows 10
       #10

    Ηow did you get the release 4.18.1908 ?
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 11:57.
Find Us




Windows 10 Forums