Introduction
This article describes monthly updates to the Windows 8 Component-Based Servicing (CBS) components. The updates improve the Windows Defender baseline engines and signatures in the Windows 8 and Windows 8.1 disk images that are created by OEMs.
For the best protection, Windows Defender engines and signatures should be kept up-to-date. A baseline set of engines and signatures is included in the original Windows image, but this baseline will be outdated by the time that it reaches customers.
These updates are offered to OEMs to help keep baseline engines and signatures closer to the current versions. This provides OEMs the ability to optimize the out-of-the-box protection and the download experience.
With Windows 2019 spring release (currently in insider build), a new feature named Tamper Protection is added to the Windows Security app. This feature is enabled to help protect users' devices. The feature can be toggled from Windows Security app:
If this feature is enabled, disabling Windows defender by using the DisableAntiSpyware group policy key will be prevented. You can continue to register other antivirus solution in Windows Security Center. If you are disabling Windows Defender antivirus because of performance reasons during factory mode customization, you can use volume exclusion instead of turning defender off. See the following MpPreference cmdlets for examples:
- powershell add-mppreference -exclusionpath c:\
- powershell remove-mppreference -exclusionpath c:\
See the following websites for more information:
- Prevent changes to security settings with Tamper Protection
- Tamper protection in Microsoft Defender ATP
More Information
Update information
How to obtain this update
These monthly updates are available on the OEM DVDs.
Prerequisites
You must apply the updates to a Windows 8 OEM disk image or a Windows 8.1 OEM disk image.
Note This update must be applied on a Windows image offline before Windows Defender is started. This update is intended to provide users the newer engines and signatures before first run of Windows Defender. If Windows Defender is already running, it may have already started automatically updating engines and signatures through Windows Update and this update is no longer necessary.
How to apply the update to a Windows image
Use Deployment Image Servicing and Management (DISM) to add packages to a Windows image. To do this, run DISM at a command prompt by using the /Add-Package option and pointing to the latest Windows Defender baseline engines and signatures .msu package that you want to add to the Windows image, as follows: dism /image: <Path To Windows Image> /Add-Package /packagepath: <Path To The .msu Update File>
Registry information
To apply the updates, you do not have to make any changes to the registry.
File information
The global version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.
The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows RT, Windows 8" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
Monthly update in April 2015
Windows RT, Windows 8 file information
For Windows RT
| File name | File version | File size | Date | Time | Platform |
|---|---|---|---|---|---|
| Mpengine.dll | 1.1.11602.0 | 5,974,136 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpasbase.vdm | 1.197.0.0 | 10,327,312 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpasdlta.vdm | 1.197.52.0 | 26,392 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpavbase.vdm | 1.197.0.0 | 18,069,272 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpavdlta.vdm | 1.197.52.0 | 57,624 | 23-Apr-2015 | 13:07 | Not applicable |
For all supported x86-based versions of Windows 8
| File name | File version | File size | Date | Time | Platform |
|---|---|---|---|---|---|
| Mpengine.dll | 1.1.11602.0 | 9,201,616 | 23-Apr-2015 | 13:07 | x86 |
| Mpengine.dll | 1.1.11602.0 | 9,201,616 | 23-Apr-2015 | 13:07 | x86 |
| Mpasbase.vdm | 1.197.0.0 | 28,609,816 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpasdlta.vdm | 1.197.52.0 | 72,984 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpavbase.vdm | 1.197.0.0 | 110,233,368 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpavdlta.vdm | 1.197.52.0 | 253,720 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpasbase.vdm | 1.197.0.0 | 28,609,816 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpasdlta.vdm | 1.197.52.0 | 72,984 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpavbase.vdm | 1.197.0.0 | 110,233,368 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpavdlta.vdm | 1.197.52.0 | 253,720 | 23-Apr-2015 | 13:07 | Not applicable |
For all supported x64-based versions of Windows 8
| File name | File version | File size | Date | Time | Platform |
|---|---|---|---|---|---|
| Mpengine.dll | 1.1.11602.0 | 12,032,440 | 23-Apr-2015 | 13:07 | x64 |
| Mpengine.dll | 1.1.11602.0 | 12,032,440 | 23-Apr-2015 | 13:07 | x64 |
| Mpasbase.vdm | 1.197.0.0 | 28,609,816 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpasdlta.vdm | 1.197.52.0 | 72,984 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpavbase.vdm | 1.197.0.0 | 110,233,368 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpavdlta.vdm | 1.197.52.0 | 253,720 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpasbase.vdm | 1.197.0.0 | 28,609,816 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpasdlta.vdm | 1.197.52.0 | 72,984 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpavbase.vdm | 1.197.0.0 | 110,233,368 | 23-Apr-2015 | 13:07 | Not applicable |
| Mpavdlta.vdm | 1.197.52.0 | 253,720 | 23-Apr-2015 | 13:07 | Not applicable |
Windows RT 8.1, Windows 8.1 file information
For Windows RT 8.1
| File name | File version | File size | Date | Time | Platform |
|---|---|---|---|---|---|
| Mpengine.dll | 1.1.11602.0 | 5,974,136 | 23-Apr-2015 | 13:08 | Not applicable |
| Mpasbase.vdm | 1.197.0.0 | 10,327,312 | 23-Apr-2015 | 13:08 | Not applicable |
| Mpasdlta.vdm | 1.197.52.0 | 26,392 | 23-Apr-2015 | 13:08 | Not applicable |
| Mpavbase.vdm | 1.197.0.0 | 18,069,272 | 23-Apr-2015 | 13:08 | Not applicable |
| Mpavdlta.vdm | 1.197.52.0 | 57,624 | 23-Apr-2015 | 13:08 | Not applicable |
| Gapaengine.dll | 2.1.11502.0 | 780,800 | 31-Mar-2015 | 22:08 | Not applicable |
| Nisbase.vdm | 114.0.0.0 | 760,048 | 31-Mar-2015 | 22:08 | Not applicable |
| Nisfull.vdm | 114.12.0.0 | 776,464 | 23-Apr-2015 | 13:08 | Not applicable |
For all supported x86-based versions of Windows 8.1
| File name | File version | File size | Date | Time | Platform |
|---|---|---|---|---|---|
| Mpengine.dll | 1.1.11602.0 | 9,201,616 | 23-Apr-2015 | 13:08 | x86 |
| Mpasbase.vdm | 1.197.0.0 | 28,609,816 | 23-Apr-2015 | 13:08 | Not applicable |
| Mpasdlta.vdm | 1.197.52.0 | 72,984 | 23-Apr-2015 | 13:08 | Not applicable |
| Mpavbase.vdm | 1.197.0.0 | 110,233,368 | 23-Apr-2015 | 13:08 | Not applicable |
| Mpavdlta.vdm | 1.197.52.0 | 253,720 | 23-Apr-2015 | 13:08 | Not applicable |
| Gapaengine.dll | 2.1.11502.0 | 908,832 | 31-Mar-2015 | 22:08 | x86 |
| Nisbase.vdm | 114.0.0.0 | 760,048 | 31-Mar-2015 | 22:08 | Not applicable |
| Nisfull.vdm | 114.12.0.0 | 776,464 | 23-Apr-2015 | 13:08 | Not applicable |
For all supported x64-based versions of Windows 8.1
| File name | File version | File size | Date | Time | Platform |
|---|---|---|---|---|---|
| Mpengine.dll | 1.1.11602.0 | 12,032,440 | 23-Apr-2015 | 13:08 | x64 |
| Mpasbase.vdm | 1.197.0.0 | 28,609,816 | 23-Apr-2015 | 13:08 | Not applicable |
| Mpasdlta.vdm | 1.197.52.0 | 72,984 | 23-Apr-2015 | 13:08 | Not applicable |
| Mpavbase.vdm | 1.197.0.0 | 110,233,368 | 23-Apr-2015 | 13:08 | Not applicable |
| Mpavdlta.vdm | 1.197.52.0 | 253,720 | 23-Apr-2015 | 13:08 | Not applicable |
| Gapaengine.dll | 2.1.11502.0 | 1,187,344 | 31-Mar-2015 | 22:08 | x64 |
| Nisbase.vdm | 114.0.0.0 | 760,048 | 31-Mar-2015 | 22:08 | Not applicable |
| Nisfull.vdm | 114.12.0.0 | 776,464 | 23-Apr-2015 | 13:08 | Not applicable |
References
For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates
Monthly update in April 2015
Additional files for Windows RT
| File property | Value |
|---|---|
| File name | Arm_6f1af3446e73c1f0ee86b8ea555271c0_31bf3856ad364e35_6.2.9200.17359_none_7dec973b24da2e33.manifest |
| File version | Not applicable |
| File size | 696 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:04 |
| File name | Arm_df978b16d2b7ee31c9d641e41dfbd311_31bf3856ad364e35_6.2.9200.17359_none_f3de1a5b6b4ed171.manifest |
| File version | Not applicable |
| File size | 694 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:04 |
| File name | Arm_windows-defender-am-engine_31bf3856ad364e35_6.2.9200.17359_none_fbfe344287882aee.manifest |
| File version | Not applicable |
| File size | 9,412 |
| Date (UTC) | 24-Apr-2015 |
| Time (UTC) | 23:34 |
| File name | Arm_windows-defender-am-sigs_31bf3856ad364e35_6.2.9200.17359_none_b95796b2ece8676e.manifest |
| File version | Not applicable |
| File size | 5,550 |
| Date (UTC) | 24-Apr-2015 |
| Time (UTC) | 23:34 |
Additional files for all supported x86-based versions of Windows 8
| File property | Value |
|---|---|
| File name | X86_0ae1d3503073a9ec1b6c14a5570b4159_31bf3856ad364e35_6.2.9200.21472_none_bea688eeee4535a0.manifest |
| File version | Not applicable |
| File size | 694 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:04 |
| File name | X86_4e55345eb0fb3227675f4ecdc868dbb8_31bf3856ad364e35_6.2.9200.21472_none_d3cd79522a1c7257.manifest |
| File version | Not applicable |
| File size | 696 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:04 |
| File name | X86_a295bf73f2f28e838fcb969718128088_31bf3856ad364e35_6.2.9200.17359_none_1e5da02dd45fad1e.manifest |
| File version | Not applicable |
| File size | 694 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:04 |
| File name | X86_a8e79a8cc965d24b5e71e0542e6ceb99_31bf3856ad364e35_6.2.9200.17359_none_67c6aa818af0ca3b.manifest |
| File version | Not applicable |
| File size | 696 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:04 |
| File name | X86_windows-defender-am-engine_31bf3856ad364e35_6.2.9200.17359_none_fbfbc1ea878b0c28.manifest |
| File version | Not applicable |
| File size | 9,412 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 04:10 |
| File name | X86_windows-defender-am-engine_31bf3856ad364e35_6.2.9200.21472_none_fc68bcd7a0bf3273.manifest |
| File version | Not applicable |
| File size | 9,412 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 03:38 |
| File name | X86_windows-defender-am-sigs_31bf3856ad364e35_6.2.9200.17359_none_b955245aeceb48a8.manifest |
| File version | Not applicable |
| File size | 5,550 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 04:10 |
| File name | X86_windows-defender-am-sigs_31bf3856ad364e35_6.2.9200.21472_none_b9c21f48061f6ef3.manifest |
| File version | Not applicable |
| File size | 5,550 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 03:38 |
Additional files for all supported x64-based versions of Windows 8
| File property | Value |
|---|---|
| File name | Amd64_09e06eb1a7520ade827ae5b310691c7e_31bf3856ad364e35_6.2.9200.17359_none_7922b62b7f22bda7.manifest |
| File version | Not applicable |
| File size | 698 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:04 |
| File name | Amd64_adac91d0eaa62d1922e4c6789c2299ee_31bf3856ad364e35_6.2.9200.21472_none_8be8b50b763bc171.manifest |
| File version | Not applicable |
| File size | 700 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:04 |
| File name | Amd64_cdb397a752f3bfa5c2abd98751d3ad8e_31bf3856ad364e35_6.2.9200.17359_none_e3547b587ebae234.manifest |
| File version | Not applicable |
| File size | 700 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:04 |
| File name | Amd64_d9b3b595889b17e9553e18d8de67c0db_31bf3856ad364e35_6.2.9200.21472_none_357c1063b0f31f1a.manifest |
| File version | Not applicable |
| File size | 698 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:04 |
| File name | Amd64_windows-defender-am-engine_31bf3856ad364e35_6.2.9200.17359_none_581a5d6e3fe87d5e.manifest |
| File version | Not applicable |
| File size | 9,416 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 07:35 |
| File name | Amd64_windows-defender-am-engine_31bf3856ad364e35_6.2.9200.21472_none_5887585b591ca3a9.manifest |
| File version | Not applicable |
| File size | 9,416 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 05:52 |
| File name | Amd64_windows-defender-am-sigs_31bf3856ad364e35_6.2.9200.17359_none_1573bfdea548b9de.manifest |
| File version | Not applicable |
| File size | 5,554 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 07:35 |
| File name | Amd64_windows-defender-am-sigs_31bf3856ad364e35_6.2.9200.21472_none_15e0bacbbe7ce029.manifest |
| File version | Not applicable |
| File size | 5,554 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 05:52 |
Additional files for Windows RT 8.1
| File property | Value |
|---|---|
| File name | Arm_0dd87064ce5727ff8185020362138228_31bf3856ad364e35_6.3.9600.17806_none_fba8f32cbf8fd5ba.manifest |
| File version | Not applicable |
| File size | 696 |
| Date (UTC) | 26-Apr-2015 |
| Time (UTC) | 02:37 |
| File name | Arm_24b06d50f299c8b6b9a2723ab299ff2a_31bf3856ad364e35_6.3.9600.17806_none_06f191000c7b4767.manifest |
| File version | Not applicable |
| File size | 697 |
| Date (UTC) | 26-Apr-2015 |
| Time (UTC) | 02:37 |
| File name | Arm_528b0742c09c0cd584951e00255ca7ab_31bf3856ad364e35_6.3.9600.17806_none_940c01aa1c370a16.manifest |
| File version | Not applicable |
| File size | 694 |
| Date (UTC) | 26-Apr-2015 |
| Time (UTC) | 02:37 |
| File name | Arm_9a676dc3a3efa4e296b36a5c64b63bcb_31bf3856ad364e35_6.3.9600.17806_none_688983559c01af92.manifest |
| File version | Not applicable |
| File size | 695 |
| Date (UTC) | 26-Apr-2015 |
| Time (UTC) | 02:37 |
| File name | Arm_windows-defender-am-engine_31bf3856ad364e35_6.3.9600.17806_none_94260524d1951574.manifest |
| File version | Not applicable |
| File size | 9,412 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:34 |
| File name | Arm_windows-defender-am-sigs_31bf3856ad364e35_6.3.9600.17806_none_517f679536f551f4.manifest |
| File version | Not applicable |
| File size | 5,550 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:34 |
| File name | Arm_windows-defender-nis-engine_31bf3856ad364e35_6.3.9600.17806_none_f0e8d9587eb83832.manifest |
| File version | Not applicable |
| File size | 1,899 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:34 |
| File name | Arm_windows-defender-nis-sigs_31bf3856ad364e35_6.3.9600.17806_none_2b8a81ce7e111178.manifest |
| File version | Not applicable |
| File size | 2,708 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:34 |
Additional files for all supported x86-based versions of Windows 8.1
| File property | Value |
|---|---|
| File name | X86_9ef56db369a32b870e7754b716783343_31bf3856ad364e35_6.3.9600.17806_none_1ca6ed3e1f547c61.manifest |
| File version | Not applicable |
| File size | 696 |
| Date (UTC) | 26-Apr-2015 |
| Time (UTC) | 02:37 |
| File name | X86_a7caaa7803fbacacbf1b7a4264de86ad_31bf3856ad364e35_6.3.9600.17806_none_7198119c13771442.manifest |
| File version | Not applicable |
| File size | 694 |
| Date (UTC) | 26-Apr-2015 |
| Time (UTC) | 02:37 |
| File name | X86_c06d6b14e0d31f2a535cc36f78505840_31bf3856ad364e35_6.3.9600.17806_none_bd5ab2d58cf92d28.manifest |
| File version | Not applicable |
| File size | 695 |
| Date (UTC) | 26-Apr-2015 |
| Time (UTC) | 02:37 |
| File name | X86_f209d1d843324199b5fd75c1bd3517e3_31bf3856ad364e35_6.3.9600.17806_none_0f07b0e48ed47ee1.manifest |
| File version | Not applicable |
| File size | 697 |
| Date (UTC) | 26-Apr-2015 |
| Time (UTC) | 02:37 |
| File name | X86_windows-defender-am-engine_31bf3856ad364e35_6.3.9600.17806_none_942392ccd197f6ae.manifest |
| File version | Not applicable |
| File size | 9,412 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:41 |
| File name | X86_windows-defender-am-sigs_31bf3856ad364e35_6.3.9600.17806_none_517cf53d36f8332e.manifest |
| File version | Not applicable |
| File size | 5,550 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:41 |
| File name | X86_windows-defender-nis-engine_31bf3856ad364e35_6.3.9600.17806_none_f0e667007ebb196c.manifest |
| File version | Not applicable |
| File size | 1,899 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:41 |
| File name | X86_windows-defender-nis-sigs_31bf3856ad364e35_6.3.9600.17806_none_2b880f767e13f2b2.manifest |
| File version | Not applicable |
| File size | 2,708 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:41 |
Additional files for all supported x64-based versions of Windows 8.1
| File property | Value |
|---|---|
| File name | Amd64_3cb77cd2d42c15ad07fe137e0a045684_31bf3856ad364e35_6.3.9600.17806_none_bcc9b9dab4959aee.manifest |
| File version | Not applicable |
| File size | 701 |
| Date (UTC) | 26-Apr-2015 |
| Time (UTC) | 02:37 |
| File name | Amd64_74f658fbf4f7311c5e5e1eeb13c39a84_31bf3856ad364e35_6.3.9600.17806_none_e54d6edaba972f67.manifest |
| File version | Not applicable |
| File size | 698 |
| Date (UTC) | 26-Apr-2015 |
| Time (UTC) | 02:37 |
| File name | Amd64_7a1a894802ba732decae7920994a4e77_31bf3856ad364e35_6.3.9600.17806_none_9be18e23f733f2d3.manifest |
| File version | Not applicable |
| File size | 700 |
| Date (UTC) | 26-Apr-2015 |
| Time (UTC) | 02:37 |
| File name | Amd64_9a88515270968a85fe2968ede65848d2_31bf3856ad364e35_6.3.9600.17806_none_30e202411c8558c3.manifest |
| File version | Not applicable |
| File size | 699 |
| Date (UTC) | 26-Apr-2015 |
| Time (UTC) | 02:37 |
| File name | Amd64_windows-defender-am-engine_31bf3856ad364e35_6.3.9600.17806_none_f0422e5089f567e4.manifest |
| File version | Not applicable |
| File size | 9,416 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:55 |
| File name | Amd64_windows-defender-am-sigs_31bf3856ad364e35_6.3.9600.17806_none_ad9b90c0ef55a464.manifest |
| File version | Not applicable |
| File size | 5,554 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:55 |
| File name | Amd64_windows-defender-nis-engine_31bf3856ad364e35_6.3.9600.17806_none_4d05028437188aa2.manifest |
| File version | Not applicable |
| File size | 1,901 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:55 |
| File name | Amd64_windows-defender-nis-sigs_31bf3856ad364e35_6.3.9600.17806_none_87a6aafa367163e8.manifest |
| File version | Not applicable |
| File size | 2,710 |
| Date (UTC) | 25-Apr-2015 |
| Time (UTC) | 21:54 |