Microsoft Defender Anti-Malware/Platform Update Kit for Windows 11 (Updated: March 27th, 2024)

Discussion in 'Windows 11' started by steven4554, Jul 3, 2021.

?

Should I drop the arm64 defender cabs for both Windows 10 and 11?

Poll closed Oct 7, 2023.
  1. Yes

    32 vote(s)
    43.8%
  2. No

    12 vote(s)
    16.4%
  3. Maybe/Don't Know

    29 vote(s)
    39.7%
  1. steven4554

    steven4554 MDL Expert

    Jul 12, 2009
    1,422
    2,598
    60
    #1 steven4554, Jul 3, 2021
    Last edited: Mar 28, 2024 at 14:51
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. steven4554

    steven4554 MDL Expert

    Jul 12, 2009
    1,422
    2,598
    60
    #2 steven4554, Jul 9, 2021
    Last edited: Mar 25, 2024 at 01:40
    (OP)
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. steven4554

    steven4554 MDL Expert

    Jul 12, 2009
    1,422
    2,598
    60
    #3 steven4554, Jul 20, 2021
    Last edited: Nov 18, 2021
    (OP)
    Update for Microsoft Defender Antivirus antimalware platform - KB4052623 (Version 4.18.2107.4)
    Now available for all on MS Catalog Website.

    Direct Download Links have been removed, as this version of the platform update is out of date and could pose a security risk.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. steven4554

    steven4554 MDL Expert

    Jul 12, 2009
    1,422
    2,598
    60
    #4 steven4554, Aug 29, 2021
    Last edited: Nov 18, 2021
    (OP)
    Update for Microsoft Defender Antivirus antimalware platform - KB4052623 (Version 4.18.2108.5)
    Only available for Insiders, Not available on MS Catalog website.

    Direct Download Links have been removed, as this version of the platform update is out of date and could pose a security risk.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. steven4554

    steven4554 MDL Expert

    Jul 12, 2009
    1,422
    2,598
    60
    #5 steven4554, Sep 1, 2021
    Last edited: Nov 18, 2021
    (OP)
    Update for Microsoft Defender Antivirus antimalware platform - KB4052623 (Version 4.18.2108.7)
    Now available for all on MS Catalog Website.

    Direct Download Links have been removed, as this version of the platform update is out of date and could pose a security risk.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. steven4554

    steven4554 MDL Expert

    Jul 12, 2009
    1,422
    2,598
    60
    #6 steven4554, Sep 15, 2021
    Last edited: Jan 31, 2024
    (OP)
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. AveYo

    AveYo MDL Expert

    Feb 10, 2009
    1,836
    5,685
    60
    Updated my posts as well - with a twist!
    filter switched to inclusion instead of exclusion so it should be futureproof + enhanced output - show signer name instead of useless Thumbprint
    I prefer using instead the generic Verify Digital Signatures from right click - Send to for any files/folders
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. steven4554

    steven4554 MDL Expert

    Jul 12, 2009
    1,422
    2,598
    60
    #8 steven4554, Sep 16, 2021
    Last edited: Jan 7, 2023
    (OP)
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. KleineZiege

    KleineZiege MDL Expert

    Dec 11, 2018
    1,680
    1,924
    60
    #9 KleineZiege, Sep 22, 2021
    Last edited: Sep 22, 2021
    New Platform Update [ 4.18.2109.2-0 ]

    1 error is displayed to me

    <defender>1.1.2109.4</defender>
    <engine>1.1.18600.3</engine>
    <platform>4.18.2109.2</platform>
    <signatures>1.349.1197.0</signatures>

    Edit:

    new win 11 created with uup-converter-wimlib-72u
    no problems, only new defination is downloaded.
    1.349.1201.0

    my definition for the package was
    1.349.1197.0

    would still be nice if they could eliminate this error, I do not like red and error ( fun fits yes everything, thank you very much, since they have conjured up something great

    I am surprised that the new engine version: 1.1.18600.3 does not appear in the created image.
    would i have to integrate extra files for this ?

    Edit:
    have found it which file responsible for the engine.
    just stupid that I have deleted the old vmware, and in the new set up it does not load the new engine 1.1.18600.3 :(
     

    Attached Files:

  10. steven4554

    steven4554 MDL Expert

    Jul 12, 2009
    1,422
    2,598
    60
    #10 steven4554, Sep 22, 2021
    Last edited: Sep 22, 2021
    (OP)
    Thanks for making me aware about the new platform update, this will be in this Friday's x64 cab. I don't mind people making their own personal defender cabs, but I would like to ask that you do not provide download links as they haven't been verified as safe or free from tampering. Also the reason why virus definition is showing error, is the mpengine.dll file has been tampered with. There is no new engine update yet, as MS hasn't released the next version of virus definitions which will be 1.351.0.0.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. steven4554

    steven4554 MDL Expert

    Jul 12, 2009
    1,422
    2,598
    60
    #11 steven4554, Sep 23, 2021
    Last edited: Sep 23, 2021
    (OP)
    Deleted.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  12. steven4554

    steven4554 MDL Expert

    Jul 12, 2009
    1,422
    2,598
    60
    #13 steven4554, Oct 5, 2021
    Last edited: Nov 18, 2021
    (OP)
    Thanks, and is available for all on MS Catalog website.

    Direct Download Links have been removed, as this version of the platform update is out of date and could pose a security risk.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  13. xCyBx

    xCyBx MDL Senior Member

    Aug 6, 2018
    315
    598
    10
    Thank you :)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  14. KleineZiege

    KleineZiege MDL Expert

    Dec 11, 2018
    1,680
    1,924
    60
    New Plattform Update v4.18.2110.5
     

    Attached Files:

  15. Jan Klos

    Jan Klos MDL Novice

    Apr 17, 2018
    2
    2
    0
    Pardon me for a possibly dumb question, but has someone successfully tested this on Windows 11? I have used Windows Defender Integration Tool v2.4 (also tried the original MS version) to integrate the latest cab (also tried the latest cab on the original MS website) to integrate to a vanilla Windows 11 ISO, no other changes to the image. After installing (tried many times in a VM) and initial OOBE (again, tested on vanilla 11 ISO without any unattended.xml), Windows still installs & uses the old platform version present in 'Program Files\Windows Defender'. Checking the registry, I see that 'HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation' is still 'C:\Program Files\Windows Defender\' (and not ProgramData) and, most importantly, BlockedLocation key is created, with value 'C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0' (corresponding to the version in cab). So it seems that the platform update is noticed and explicitly blocked. The signatures/engine, on the other hand, seems to be installed without problems.
     
  16. windows builder

    windows builder MDL Guru

    Sep 13, 2017
    2,203
    1,532
    90
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  17. Jan Klos

    Jan Klos MDL Novice

    Apr 17, 2018
    2
    2
    0
    OK, figured it out, the DefenderUpdateWinImage is wrong & obsolete, even the modified 2.4 version. It overrides newer versions of MpAsDesc.dll(.mui) files with stock versions from Program Files. This must be something from old versions that did not contain their own versions of those files? Commenting these blocks:
    # MpAsDesc.dll,
    # Language mui file(mpasdesc.dll.mui).
    # x86 mui files for amd64.
    makes the update to install correctly (then again, you might just as well extract the files and just copy them). This has been broken for a while...
     
  18. drew84

    drew84 MDL Expert

    Mar 13, 2014
    1,347
    2,302
    60