November 2013 anti-malware platform update for Endpoint Protection clients

Summary

This article describes an anti-malware platform update package for the following clients:

Microsoft System Center 2012 R2 Configuration Manager Endpoint Protection clients
Microsoft System Center 2012 Configuration Manager Endpoint Protection Service Pack 1 (SP1) clients
Microsoft Forefront Endpoint Protection 2010 clients.

These packages update Endpoint Protection client services, drivers, and UI components.Microsoft regularly releases anti-malware platform updates to guarantee consistency in protection, performance, robustness, and usability in a malware landscape that is constantly changing. This update package is dated November 2013.

Update information

This anti-malware platform update contains the following improvements:

Adds anti-tampering functionality to reduce the risk that malware will disable or bypass anti-malware scanning.For example, access to files and folders that are used by the anti-malware platform can be changed only by trusted system processes or by the anti-malware platform itself.
Improves overall performance of the anti-malware platform.Anti-malware performance is improved compared to that of previous platform versions. Improvements were made to scan functionality. These changes involve no configurable effects.
Ongoing improvements to Microsoft Active Protection Service (MAPS) and Dynamic Signature Service (DSS). These make real-time cloud-based protection easier.Scale and performance improvements were made to the MAPS and DSS systems. Make sure that you opt-in to at least Basic or Advanced MAPS to make sure that you are benefitting from cloud-based protection.

How to obtain this update

This update is available from the following Microsoft website:

Microsoft Support

A supported update is available from Microsoft Support.If this update is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the update. Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, go to the following Microsoft website:

http://support.microsoft.com/contactus/?ws=supportNote The "Hotfix download available" form displays the languages for which the update is available. If you do not see your language, it is because an update is not available for that language.

Prerequisites

To apply this update, you must have one of the following installed:

System Center 2012 R2 Configuration Manager
Cumulative Update 3 for System Center 2012 Configuration Manager Service Pack 1
Service Pack 2 for System Center Configuration Manager 2007 and Update Rollup 1 for Forefront Endpoint Protection 2010

Restart information

You may have to restart the computer after you apply this update.Note We recommend that you close the Configuration Manager Administration Console before you install this update package.

Installation information

System Center 2012 R2 Endpoint Protection clients and System Center 2012 Endpoint Protection clients

After you install this update package, you must enable the Automatic Client Upgrade feature in the Configuration Manager Administrator Console. The Endpoint Protection agent will be upgraded, depending on the values that are defined in the client policy retrieval settings and in the Automatically upgrade client within days setting.

Forefront Endpoint Protection 2010

After you install this update package, you must create a new Forefront Endpoint Protection client installation deployment or rerun the existing advertisement. For more information about how to create the deployment, see the following Microsoft TechNet topic:

Deploying by Using Configuration Manager Packages For more information, see the following Microsoft Developer Network (MSDN) blog article:

Installing anti-malware platform updates for FEP 2010 SU1 and SCEP 2012 SP1

Update replacement information

This update replaces the following update:

2865173 An anti-malware platform update for Endpoint Protection clients is available from Microsoft Support

Version information

This update brings the anti-malware client version to 4.4.304.0. To find the version information, click About on the Help menu of the Endpoint Protection client UI.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For System Center 2012 R2 Endpoint Protection

File name	File version	File size	Date	Time	Platform
Ccmsetup.cab	Not applicable	9,655	30-Sep-2013	23:10	Not applicable
Scepinstall.exe	4.4.304.0	25,271,944	30-Sep-2013	23:10	x86

For System Center 2012 Endpoint Protection

File name	File version	File size	Date	Time	Platform
Ccmsetup.cab	Not applicable	9,613	31-Aug-2013	23:20	Not applicable
Scepinstall.exe	4.4.304.0	25,271,944	31-Aug-2013	23:20	x86

For Forefront Endpoint Protection 2010

File name	File version	File size	Date	Time	Platform
Amuninstall.vbs	Not applicable	10,051	01-Jul-2011	00:40	Not applicable
Commonsetuputils.dll	2.1.1116.115	68,272	01-Jul-2011	00:40	x86
Fepinstall.exe	4.4.304.0	25,496,200	08-Nov-2013	03:45	x86
Fepregistrator.exe	2.1.1116.115	121,520	01-Jul-2011	00:40	x86
Ux.commonconstants.dll	2.1.1116.115	26,288	01-Jul-2011	00:40	x86

For stand-alone System Center 2012 Endpoint Protection clients and System Center 2012 R2 Endpoint Protection clients

File name	File version	File size	Date	Time	Platform
Scepinstall.exe	4.4.304.0	25,271,944	30-Sep-2013	09:10	x86

For stand-alone Forefront Endpoint Protection clients

File name	File version	File size	Date	Time	Platform
Fepinstall.exe	4.4.304.0	25,496,200	08-Nov-2013	05:45	x86