Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. Improve Windows Defender baseline (engines, platform and security intelligence update) in OEM disk images using monthly updates and guideline to optimize during factory mode

Improve Windows Defender baseline (engines, platform and security intelligence update) in OEM disk images using monthly updates and guideline to optimize during factory mode

View products that this article applies to.

Introduction

This article describes monthly updates to the Windows 8 Component-Based Servicing (CBS) components. The updates improve the Windows Defender baseline engines and signatures in the Windows 8 and Windows 8.1 disk images that are created by OEMs.

For the best protection, Windows Defender engines and signatures should be kept up-to-date. A baseline set of engines and signatures is included in the original Windows image, but this baseline will be outdated by the time that it reaches customers.

These updates are offered to OEMs to help keep baseline engines and signatures closer to the current versions. This provides OEMs the ability to optimize the out-of-the-box protection and the download experience.

With Windows 2019 spring release (currently in insider build), a new feature named Tamper Protection is added to the Windows Security app. This feature is enabled to help protect users' devices. The feature can be toggled from Windows Security app:

Screenshot of Windows Security App

If this feature is enabled, disabling Windows defender by using the DisableAntiSpyware group policy key will be prevented. You can continue to register other antivirus solution in Windows Security Center. If you are disabling Windows Defender antivirus because of performance reasons during factory mode customization, you can use volume exclusion instead of turning defender off. See the following MpPreference cmdlets for examples:

  • powershell add-mppreference -exclusionpath c:\
  • powershell remove-mppreference -exclusionpath c:\

See the following websites for more information:

↑ Back to the top

More Information

Update information

How to obtain this update

These monthly updates are available on the OEM DVDs.

Prerequisites

You must apply the updates to a Windows 8 OEM disk image or a Windows 8.1 OEM disk image.

Note This update must be applied on a Windows image offline before Windows Defender is started. This update is intended to provide users the newer engines and signatures before first run of Windows Defender. If Windows Defender is already running, it may have already started automatically updating engines and signatures through Windows Update and this update is no longer necessary.

How to apply the update to a Windows image

Use Deployment Image Servicing and Management (DISM) to add packages to a Windows image. To do this, run DISM at a command prompt by using the /Add-Package option and pointing to the latest Windows Defender baseline engines and signatures .msu package that you want to add to the Windows image, as follows: 
dism /image:  <Path To Windows Image>  /Add-Package /packagepath:  <Path To The .msu Update File>

Registry information

To apply the updates, you do not have to make any changes to the registry.

File information

The global version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows RT, Windows 8" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
Monthly update in April 2015
Windows RT, Windows 8 file information
For Windows RT
File nameFile versionFile sizeDateTimePlatform
Mpengine.dll1.1.11602.05,974,13623-Apr-201513:07Not applicable
Mpasbase.vdm1.197.0.010,327,31223-Apr-201513:07Not applicable
Mpasdlta.vdm1.197.52.026,39223-Apr-201513:07Not applicable
Mpavbase.vdm1.197.0.018,069,27223-Apr-201513:07Not applicable
Mpavdlta.vdm1.197.52.057,62423-Apr-201513:07Not applicable
For all supported x86-based versions of Windows 8
File nameFile versionFile sizeDateTimePlatform
Mpengine.dll1.1.11602.09,201,61623-Apr-201513:07x86
Mpengine.dll1.1.11602.09,201,61623-Apr-201513:07x86
Mpasbase.vdm1.197.0.028,609,81623-Apr-201513:07Not applicable
Mpasdlta.vdm1.197.52.072,98423-Apr-201513:07Not applicable
Mpavbase.vdm1.197.0.0110,233,36823-Apr-201513:07Not applicable
Mpavdlta.vdm1.197.52.0253,72023-Apr-201513:07Not applicable
Mpasbase.vdm1.197.0.028,609,81623-Apr-201513:07Not applicable
Mpasdlta.vdm1.197.52.072,98423-Apr-201513:07Not applicable
Mpavbase.vdm1.197.0.0110,233,36823-Apr-201513:07Not applicable
Mpavdlta.vdm1.197.52.0253,72023-Apr-201513:07Not applicable
For all supported x64-based versions of Windows 8
File nameFile versionFile sizeDateTimePlatform
Mpengine.dll1.1.11602.012,032,44023-Apr-201513:07x64
Mpengine.dll1.1.11602.012,032,44023-Apr-201513:07x64
Mpasbase.vdm1.197.0.028,609,81623-Apr-201513:07Not applicable
Mpasdlta.vdm1.197.52.072,98423-Apr-201513:07Not applicable
Mpavbase.vdm1.197.0.0110,233,36823-Apr-201513:07Not applicable
Mpavdlta.vdm1.197.52.0253,72023-Apr-201513:07Not applicable
Mpasbase.vdm1.197.0.028,609,81623-Apr-201513:07Not applicable
Mpasdlta.vdm1.197.52.072,98423-Apr-201513:07Not applicable
Mpavbase.vdm1.197.0.0110,233,36823-Apr-201513:07Not applicable
Mpavdlta.vdm1.197.52.0253,72023-Apr-201513:07Not applicable
Windows RT 8.1, Windows 8.1 file information
For Windows RT 8.1
File nameFile versionFile sizeDateTimePlatform
Mpengine.dll1.1.11602.05,974,13623-Apr-201513:08Not applicable
Mpasbase.vdm1.197.0.010,327,31223-Apr-201513:08Not applicable
Mpasdlta.vdm1.197.52.026,39223-Apr-201513:08Not applicable
Mpavbase.vdm1.197.0.018,069,27223-Apr-201513:08Not applicable
Mpavdlta.vdm1.197.52.057,62423-Apr-201513:08Not applicable
Gapaengine.dll2.1.11502.0780,80031-Mar-201522:08Not applicable
Nisbase.vdm114.0.0.0760,04831-Mar-201522:08Not applicable
Nisfull.vdm114.12.0.0776,46423-Apr-201513:08Not applicable
For all supported x86-based versions of Windows 8.1
File nameFile versionFile sizeDateTimePlatform
Mpengine.dll1.1.11602.09,201,61623-Apr-201513:08x86
Mpasbase.vdm1.197.0.028,609,81623-Apr-201513:08Not applicable
Mpasdlta.vdm1.197.52.072,98423-Apr-201513:08Not applicable
Mpavbase.vdm1.197.0.0110,233,36823-Apr-201513:08Not applicable
Mpavdlta.vdm1.197.52.0253,72023-Apr-201513:08Not applicable
Gapaengine.dll2.1.11502.0908,83231-Mar-201522:08x86
Nisbase.vdm114.0.0.0760,04831-Mar-201522:08Not applicable
Nisfull.vdm114.12.0.0776,46423-Apr-201513:08Not applicable
For all supported x64-based versions of Windows 8.1
File nameFile versionFile sizeDateTimePlatform
Mpengine.dll1.1.11602.012,032,44023-Apr-201513:08x64
Mpasbase.vdm1.197.0.028,609,81623-Apr-201513:08Not applicable
Mpasdlta.vdm1.197.52.072,98423-Apr-201513:08Not applicable
Mpavbase.vdm1.197.0.0110,233,36823-Apr-201513:08Not applicable
Mpavdlta.vdm1.197.52.0253,72023-Apr-201513:08Not applicable
Gapaengine.dll2.1.11502.01,187,34431-Mar-201522:08x64
Nisbase.vdm114.0.0.0760,04831-Mar-201522:08Not applicable
Nisfull.vdm114.12.0.0776,46423-Apr-201513:08Not applicable

↑ Back to the top

References

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates

Additional file information

Monthly update in April 2015

Additional files for Windows RT
File propertyValue
File nameArm_6f1af3446e73c1f0ee86b8ea555271c0_31bf3856ad364e35_6.2.9200.17359_none_7dec973b24da2e33.manifest
File versionNot applicable
File size696
Date (UTC)25-Apr-2015
Time (UTC)21:04
File nameArm_df978b16d2b7ee31c9d641e41dfbd311_31bf3856ad364e35_6.2.9200.17359_none_f3de1a5b6b4ed171.manifest
File versionNot applicable
File size694
Date (UTC)25-Apr-2015
Time (UTC)21:04
File nameArm_windows-defender-am-engine_31bf3856ad364e35_6.2.9200.17359_none_fbfe344287882aee.manifest
File versionNot applicable
File size9,412
Date (UTC)24-Apr-2015
Time (UTC)23:34
File nameArm_windows-defender-am-sigs_31bf3856ad364e35_6.2.9200.17359_none_b95796b2ece8676e.manifest
File versionNot applicable
File size5,550
Date (UTC)24-Apr-2015
Time (UTC)23:34
Additional files for all supported x86-based versions of Windows 8
File propertyValue
File nameX86_0ae1d3503073a9ec1b6c14a5570b4159_31bf3856ad364e35_6.2.9200.21472_none_bea688eeee4535a0.manifest
File versionNot applicable
File size694
Date (UTC)25-Apr-2015
Time (UTC)21:04
File nameX86_4e55345eb0fb3227675f4ecdc868dbb8_31bf3856ad364e35_6.2.9200.21472_none_d3cd79522a1c7257.manifest
File versionNot applicable
File size696
Date (UTC)25-Apr-2015
Time (UTC)21:04
File nameX86_a295bf73f2f28e838fcb969718128088_31bf3856ad364e35_6.2.9200.17359_none_1e5da02dd45fad1e.manifest
File versionNot applicable
File size694
Date (UTC)25-Apr-2015
Time (UTC)21:04
File nameX86_a8e79a8cc965d24b5e71e0542e6ceb99_31bf3856ad364e35_6.2.9200.17359_none_67c6aa818af0ca3b.manifest
File versionNot applicable
File size696
Date (UTC)25-Apr-2015
Time (UTC)21:04
File nameX86_windows-defender-am-engine_31bf3856ad364e35_6.2.9200.17359_none_fbfbc1ea878b0c28.manifest
File versionNot applicable
File size9,412
Date (UTC)25-Apr-2015
Time (UTC)04:10
File nameX86_windows-defender-am-engine_31bf3856ad364e35_6.2.9200.21472_none_fc68bcd7a0bf3273.manifest
File versionNot applicable
File size9,412
Date (UTC)25-Apr-2015
Time (UTC)03:38
File nameX86_windows-defender-am-sigs_31bf3856ad364e35_6.2.9200.17359_none_b955245aeceb48a8.manifest
File versionNot applicable
File size5,550
Date (UTC)25-Apr-2015
Time (UTC)04:10
File nameX86_windows-defender-am-sigs_31bf3856ad364e35_6.2.9200.21472_none_b9c21f48061f6ef3.manifest
File versionNot applicable
File size5,550
Date (UTC)25-Apr-2015
Time (UTC)03:38
Additional files for all supported x64-based versions of Windows 8
File propertyValue
File nameAmd64_09e06eb1a7520ade827ae5b310691c7e_31bf3856ad364e35_6.2.9200.17359_none_7922b62b7f22bda7.manifest
File versionNot applicable
File size698
Date (UTC)25-Apr-2015
Time (UTC)21:04
File nameAmd64_adac91d0eaa62d1922e4c6789c2299ee_31bf3856ad364e35_6.2.9200.21472_none_8be8b50b763bc171.manifest
File versionNot applicable
File size700
Date (UTC)25-Apr-2015
Time (UTC)21:04
File nameAmd64_cdb397a752f3bfa5c2abd98751d3ad8e_31bf3856ad364e35_6.2.9200.17359_none_e3547b587ebae234.manifest
File versionNot applicable
File size700
Date (UTC)25-Apr-2015
Time (UTC)21:04
File nameAmd64_d9b3b595889b17e9553e18d8de67c0db_31bf3856ad364e35_6.2.9200.21472_none_357c1063b0f31f1a.manifest
File versionNot applicable
File size698
Date (UTC)25-Apr-2015
Time (UTC)21:04
File nameAmd64_windows-defender-am-engine_31bf3856ad364e35_6.2.9200.17359_none_581a5d6e3fe87d5e.manifest
File versionNot applicable
File size9,416
Date (UTC)25-Apr-2015
Time (UTC)07:35
File nameAmd64_windows-defender-am-engine_31bf3856ad364e35_6.2.9200.21472_none_5887585b591ca3a9.manifest
File versionNot applicable
File size9,416
Date (UTC)25-Apr-2015
Time (UTC)05:52
File nameAmd64_windows-defender-am-sigs_31bf3856ad364e35_6.2.9200.17359_none_1573bfdea548b9de.manifest
File versionNot applicable
File size5,554
Date (UTC)25-Apr-2015
Time (UTC)07:35
File nameAmd64_windows-defender-am-sigs_31bf3856ad364e35_6.2.9200.21472_none_15e0bacbbe7ce029.manifest
File versionNot applicable
File size5,554
Date (UTC)25-Apr-2015
Time (UTC)05:52
Additional files for Windows RT 8.1
File propertyValue
File nameArm_0dd87064ce5727ff8185020362138228_31bf3856ad364e35_6.3.9600.17806_none_fba8f32cbf8fd5ba.manifest
File versionNot applicable
File size696
Date (UTC)26-Apr-2015
Time (UTC)02:37
File nameArm_24b06d50f299c8b6b9a2723ab299ff2a_31bf3856ad364e35_6.3.9600.17806_none_06f191000c7b4767.manifest
File versionNot applicable
File size697
Date (UTC)26-Apr-2015
Time (UTC)02:37
File nameArm_528b0742c09c0cd584951e00255ca7ab_31bf3856ad364e35_6.3.9600.17806_none_940c01aa1c370a16.manifest
File versionNot applicable
File size694
Date (UTC)26-Apr-2015
Time (UTC)02:37
File nameArm_9a676dc3a3efa4e296b36a5c64b63bcb_31bf3856ad364e35_6.3.9600.17806_none_688983559c01af92.manifest
File versionNot applicable
File size695
Date (UTC)26-Apr-2015
Time (UTC)02:37
File nameArm_windows-defender-am-engine_31bf3856ad364e35_6.3.9600.17806_none_94260524d1951574.manifest
File versionNot applicable
File size9,412
Date (UTC)25-Apr-2015
Time (UTC)21:34
File nameArm_windows-defender-am-sigs_31bf3856ad364e35_6.3.9600.17806_none_517f679536f551f4.manifest
File versionNot applicable
File size5,550
Date (UTC)25-Apr-2015
Time (UTC)21:34
File nameArm_windows-defender-nis-engine_31bf3856ad364e35_6.3.9600.17806_none_f0e8d9587eb83832.manifest
File versionNot applicable
File size1,899
Date (UTC)25-Apr-2015
Time (UTC)21:34
File nameArm_windows-defender-nis-sigs_31bf3856ad364e35_6.3.9600.17806_none_2b8a81ce7e111178.manifest
File versionNot applicable
File size2,708
Date (UTC)25-Apr-2015
Time (UTC)21:34
Additional files for all supported x86-based versions of Windows 8.1
File propertyValue
File nameX86_9ef56db369a32b870e7754b716783343_31bf3856ad364e35_6.3.9600.17806_none_1ca6ed3e1f547c61.manifest
File versionNot applicable
File size696
Date (UTC)26-Apr-2015
Time (UTC)02:37
File nameX86_a7caaa7803fbacacbf1b7a4264de86ad_31bf3856ad364e35_6.3.9600.17806_none_7198119c13771442.manifest
File versionNot applicable
File size694
Date (UTC)26-Apr-2015
Time (UTC)02:37
File nameX86_c06d6b14e0d31f2a535cc36f78505840_31bf3856ad364e35_6.3.9600.17806_none_bd5ab2d58cf92d28.manifest
File versionNot applicable
File size695
Date (UTC)26-Apr-2015
Time (UTC)02:37
File nameX86_f209d1d843324199b5fd75c1bd3517e3_31bf3856ad364e35_6.3.9600.17806_none_0f07b0e48ed47ee1.manifest
File versionNot applicable
File size697
Date (UTC)26-Apr-2015
Time (UTC)02:37
File nameX86_windows-defender-am-engine_31bf3856ad364e35_6.3.9600.17806_none_942392ccd197f6ae.manifest
File versionNot applicable
File size9,412
Date (UTC)25-Apr-2015
Time (UTC)21:41
File nameX86_windows-defender-am-sigs_31bf3856ad364e35_6.3.9600.17806_none_517cf53d36f8332e.manifest
File versionNot applicable
File size5,550
Date (UTC)25-Apr-2015
Time (UTC)21:41
File nameX86_windows-defender-nis-engine_31bf3856ad364e35_6.3.9600.17806_none_f0e667007ebb196c.manifest
File versionNot applicable
File size1,899
Date (UTC)25-Apr-2015
Time (UTC)21:41
File nameX86_windows-defender-nis-sigs_31bf3856ad364e35_6.3.9600.17806_none_2b880f767e13f2b2.manifest
File versionNot applicable
File size2,708
Date (UTC)25-Apr-2015
Time (UTC)21:41
Additional files for all supported x64-based versions of Windows 8.1
File propertyValue
File nameAmd64_3cb77cd2d42c15ad07fe137e0a045684_31bf3856ad364e35_6.3.9600.17806_none_bcc9b9dab4959aee.manifest
File versionNot applicable
File size701
Date (UTC)26-Apr-2015
Time (UTC)02:37
File nameAmd64_74f658fbf4f7311c5e5e1eeb13c39a84_31bf3856ad364e35_6.3.9600.17806_none_e54d6edaba972f67.manifest
File versionNot applicable
File size698
Date (UTC)26-Apr-2015
Time (UTC)02:37
File nameAmd64_7a1a894802ba732decae7920994a4e77_31bf3856ad364e35_6.3.9600.17806_none_9be18e23f733f2d3.manifest
File versionNot applicable
File size700
Date (UTC)26-Apr-2015
Time (UTC)02:37
File nameAmd64_9a88515270968a85fe2968ede65848d2_31bf3856ad364e35_6.3.9600.17806_none_30e202411c8558c3.manifest
File versionNot applicable
File size699
Date (UTC)26-Apr-2015
Time (UTC)02:37
File nameAmd64_windows-defender-am-engine_31bf3856ad364e35_6.3.9600.17806_none_f0422e5089f567e4.manifest
File versionNot applicable
File size9,416
Date (UTC)25-Apr-2015
Time (UTC)21:55
File nameAmd64_windows-defender-am-sigs_31bf3856ad364e35_6.3.9600.17806_none_ad9b90c0ef55a464.manifest
File versionNot applicable
File size5,554
Date (UTC)25-Apr-2015
Time (UTC)21:55
File nameAmd64_windows-defender-nis-engine_31bf3856ad364e35_6.3.9600.17806_none_4d05028437188aa2.manifest
File versionNot applicable
File size1,901
Date (UTC)25-Apr-2015
Time (UTC)21:55
File nameAmd64_windows-defender-nis-sigs_31bf3856ad364e35_6.3.9600.17806_none_87a6aafa367163e8.manifest
File versionNot applicable
File size2,710
Date (UTC)25-Apr-2015
Time (UTC)21:54

↑ Back to the top

Keywords: kb, kbqfe, kbexpertiseadvanced, kboem

↑ Back to the top

Article Info
Article ID : 2769299
Revision : 4
Created on : 4/5/2019
Published on : 4/5/2019
Exists online : False
Views : 434