MS Antimalware Platform 4.18.2001.6 only on one PC

Again, yesterday only my home PC got antimalware version 4.18.2004.5

All my other PCs are on 4.18.2003.8

PS - I am starting to dislike this random antimalware platform update MS approach.

eLPuSHeR said:

Again, yesterday only my home PC got antimalware version 4.18.2004.5

All my other PCs are on 4.18.2003.8

PS - I am starting to dislike this random antimalware platform update MS approach.

These continuing antimalware platform episodes are becoming a nuisance. I'm still on 4.18.2003.8 and 4.18.2004.5 is not on the Microsoft Update Catalog (at least as of this writing). There've also been some borked definition updates, although that does and can happen with any antivirus program. I guess we have to remain vigilant and hope MS straightens things out.

eLPuSHeR said:

Again, yesterday only my home PC got antimalware version 4.18.2004.5

All my other PCs are on 4.18.2003.8

PS - I am starting to dislike this random antimalware platform update MS approach.

Out of curiosity, does this PC that received the 4.18.2004.5 platform update run a custom Scheduled Task that you created that either does a Definition update or a Scan that the other's don't?

Farvatten said:

Out of curiosity, does this PC that received the 4.18.2004.5 platform update run a custom Scheduled Task that you created that either does a Definition update or a Scan that the other's don't?

Nope. I just run Windows Update manually everyday. The same for all my pcs.

eLPuSHeR said:

Nope. I just run Windows Update manually everyday. The same for all my pcs.

Thanks for that data point. There had been some discussion that those getting these advanced Defender Platforms got them after being identified by Microsoft as 'seekers' once they were seen consistently looking for new definitions or running custom scans.

If you perform this regedit

Code:

reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine" /f /v MpCampRing /t REG_DWORD /d 3

control /name Microsoft.WindowsUpdate

when it does the next windows update it should update to the latest 4.18.2004.5 as of this morning and erase the reg entry.

I've noticed the same thing where different machines would be stuck on different platform versions. Today looking at two exact computers just recently installed and which should have been completely identical, I finally had enough and checked the registry. There were 3 keys, I assumed I wouldn't need to enter them all and from KB4052623 thought to focus on MpCampRing so what I have above was sufficient to update several computers using those two lines above in essentially what is a script.

Code:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\MpEngine
    MpCampGradualRelease    REG_DWORD    0x1
    MpCampRing      REG_DWORD    0x3
    MpEngineRing    REG_DWORD    0x3

Signed
`™

tymes said:

Code:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\MpEngine
    MpCampGradualRelease    REG_DWORD    0x1
    MpCampRing      REG_DWORD    0x3
    MpEngineRing    REG_DWORD    0x3

This is consistent with the registry of my two machines which religiously get the most recent platforms, typically coming down the night before a new Tuesday release.

Interesting find, tymes.

I don't have any of these subkeys on the machine where the Antimalware Platform isn't updated.

After adding the key, Antimalware Platform was updated to 4.18.2004.6

Maybe these are BETA versions?

eLPuSHeR said:

After adding the key, Antimalware Platform was updated to 4.18.2004.6
Maybe these are BETA versions?

Very possible.

Considering that's the 3rd this month.

4.18.2004.4 on 12th, the .5 on 16th and now .6 today the 21st while many are still back on 4.18.2003.*