Microsoft Malware Protection Engine deployment information

Article translations Article translations
Article ID: 2510781
Expand all | Collapse all

On This Page

INTRODUCTION

This article provides information about how to update the Malware Protection Engine. The article provides details about prerequisites, restart requirements, removal information, and how to verify that the updates have been installed correctly.

The information in this article applies to the following products:
  • Microsoft Forefront Client Security
  • Microsoft Forefront Endpoint Protection 2010
  • Microsoft Forefront Security for SharePoint Service Pack 3
  • Microsoft System Center 2012 Endpoint Protection
  • Microsoft System Center 2012 Endpoint Protection Service Pack 1
  • Microsoft Malicious Software Removal Tool
  • Microsoft Security Essentials
  • Microsoft Security Essentials Prerelease
  • Windows Defender for Windows 8
  • Windows Defender for Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2
  • Windows Defender Offline
  • Windows Intune Endpoint Protection
  For more information about the affected software, go to the following Microsoft Advisory webpage:
http://technet.microsoft.com/security/advisory/2846338

More information

Windows Defender for Windows 8

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart. For more information about why you may be prompted to restart your computer, click the following article number to view the article in the Microsoft Knowledge Base:
887012 Why you may be prompted to restart your computer after you install a security update on a Windows-based computer

Removal information

This update can be uninstalled from Windows 8.

Verification of the update installation

To verify that the update was applied to an affected system, follow these steps:
  1. Open the malware protection program that you are using. For example, to open Windows Defender in Windows 8, press the Windows key to open the Start screen, and then type Windows Defender. Click the Windows Defender icon.
  2. Click the Update tab.

    Note On this tab, you can click Update to manually update the virus and spyware definitions from Microsoft.
  3. Click Help, and then click About.
  4. Note the Engine Version number. The update was successfully installed if the Malware Protection Engine version number or if the signature package version number matches or exceeds the version 1.1.9506.0. 

Windows Defender for Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart. For more information about why you may be prompted to restart your computer, click the following article number to view the article in the Microsoft Knowledge Base:
887012 Why you may be prompted to restart your computer after you install a security update on a Windows-based computer

Removal information

This update cannot be uninstalled from Windows XP or Windows Server 2003. This update can be uninstalled from Windows Vista and Windows 7.

Verification of the update installation

To verify that the update was applied to an affected system, follow these steps: 
  1. Click Help, and then click About Windows Defender.
  2. Note the Engine Version number. The update was successfully installed if the Malware Protection Engine version number or if the signature package version number matches or exceeds the version number that you are trying to verify as installed. 
Note Windows Defender may be disabled when Microsoft Security Essentials (MSE) or Forefront Endpoint Protection (FEP) is being installed. This is by design, as MSE and FEP are functional supersets of Windows Defender. The currently active product will receive engine and definition updates accordingly.

Microsoft Forefront Client Security

Restart requirement


This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart.

For more information about why you may be prompted to restart your computer, click the following article number to view the article in the Microsoft Knowledge Base:
887012 Why you may be prompted to restart your computer after you install a security update on a Windows-based computer

Removal information

This update cannot be uninstalled when you are using Microsoft Forefront Client Security.

Verification of the update installation

To verify that the update has been applied to an affected system, follow these steps:
  1. Click the down arrow next to the help icon, and then click About Microsoft Forefront Client Security.
  2. Note the Engine Version number. The update has been successfully installed if the Malware Protection Engine version number or if the signature package version number matches or exceeds the version number that you are trying to verify as installed.

Microsoft Forefront Security for SharePoint

Restart requirement

This update is automatic and does not require a restart.

Forefront Server security update service automatically updates the Malware Protection Engine in Forefront Security for SharePoint. However, on systems that are running Forefront Security for SharePoint where users have disabled the Malware Protection Engine, users must re-enable the engine by using the administrator tool. When it is re-enabled, click Update Now to update the engine.

Removal information

This update cannot be uninstalled.

Verification of the update installation

To verify that the update has been applied to an affected system, follow these steps:
  1. In Forefront Administrator, click Scanner Updates, and then click Microsoft Malware Protection Engine.
  2. Note the Engine Version number. The update has been successfully installed if the Malware Protection Engine version number or if the signature package version number matches or exceeds the version number that you are trying to verify as installed.
For more information about how to configure Forefront Security for SharePoint engines, go to the following TechNet webpage: 
Forefront Protection for SharePoint

System Center Endpoint Protection

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart. For more information about why you may be prompted to restart your computer, click the following article number to view the article in the Microsoft Knowledge Base:
887012 Why you may be prompted to restart your computer after you install a security update on a Windows-based computer

Removal information

This update cannot be uninstalled.

Verification of the update installation

To verify that the update was applied to an affected system, follow these steps:
  1. Open the malware protection program that you are using.
  2. Click Help, and then click About System Center Endpoint Protection.
  3. Note Engine Version number. The update was successfully installed if the Malware Protection Engine version number or if the signature package version number matches or exceeds the version number that you are trying to verify as installed. 

Forefront Endpoint Protection

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart. For more information about why you may be prompted to restart your computer, click the following article number to view the article in the Microsoft Knowledge Base:
887012 Why you may be prompted to restart your computer after you install a security update on a Windows-based computer

Removal information

This update cannot be uninstalled.

Verification of the update installation

To verify that the update was applied to an affected system, follow these steps:
  1. Open the malware protection program that you are using.
  2. Click Help, and then click About Forefront Endpoint Protection.
  3. Note the Engine Version number. The update was successfully installed if the Malware Protection Engine version number or if the signature package version number matches or exceeds the version number that you are trying to verify as installed. 

Microsoft Security Essentials 

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart. For more information about why you may be prompted to restart your computer, click the following article number to view the article in the Microsoft Knowledge Base:
887012 Why you may be prompted to restart your computer after you install a security update on a Windows-based computer

Removal information

This update cannot be uninstalled.

Note If you want to uninstall the engine, you must uninstall Security Essentials.

Verification of the update installation

To verify that the update was applied to an affected system, follow these steps:
  1. Open the malware protection program that you are using.
  2. Click Help, and then click About Microsoft Security Essentials.
  3. Note the Engine Version number. The update was successfully installed if the Malware Protection Engine version number or if the signature package version number matches or exceeds the version number that you are trying to verify as installed. 

Properties

Article ID: 2510781 - Last Review: May 14, 2013 - Revision: 4.0
Keywords: 
kbexpertiseinter kbinfo kbsecadvisory kbsecurity kbsecvulnerability kbvirus KB2510781

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com