You are currently offline, waiting for your internet to reconnect

Anti-malware platform update for Windows Defender is available in Windows 8, Windows RT, Windows 8.1, and Windows RT 8.1

Introduction
This article describes an anti-malware platform update for Windows Defender that is available in Windows 8, Windows RT, Windows 8.1, and Windows RT 8.1. This anti-malware platform update for Windows Defender updates Windows Defender services, drivers, and UIs.

Microsoft regularly releases anti-malware platform updates to guarantee consistency in protection, performance, robustness, and usability in a malware landscape that is constantly changing.
More information
This anti-malware platform update contains the following improvements:
  • Anti-tampering improvements to the anti-malware platform
  • Hardening improvements
  • Improvements to Windows Defender Offline remediation functionality

Update information

How to obtain this update

Windows Update
This update is available from Windows Update.
Microsoft Download Center
The following files are available for download from the Microsoft Download Center:
Operating systemUpdate
All supported x86-based versions of Windows 8DownloadDownload the package now.
All supported x64-based versions of Windows 8DownloadDownload the package now.
All supported x86-based versions of Windows 8.1DownloadDownload the package now.
All supported x64-based versions of Windows 8.1DownloadDownload the package now.
For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Prerequisites

To apply this update, you must be running one of the following operating systems:
  • Windows RT
  • Windows 8
  • Windows RT 8.1
  • Windows 8.1

Registry information

To apply this update, you do not have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this update. 

Update replacement information

This update replaces the update that is described in Microsoft Knowledge Base (KB) article 2856373. For more information about KB article 2856373, click the following article number to view the article in the Microsoft Knowledge Base:
2856373 Anti-malware platform update for Windows Defender is available in Windows 8 and in Windows RT

File information

The global version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.
Windows RT and Windows 8 file information notes
Important Windows 8 hotfixes and Windows Server 2012 hotfixes are included in the same packages. However, only "Windows 8" is listed on the Hotfix Request page. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 8" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.2.920 0.16 xxxWindows RT and Windows 8 RTMGDR
    6.2.920 0.20 xxxWindows RT and Windows 8RTMLDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows RT and Windows 8" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
For Windows RT
File nameFile versionFile sizeDateTimePlatform
Wdboot.sys4.4.0304.029,71225-Oct-201303:53Not applicable
Wdfilter.sys4.4.0304.0198,12024-Oct-201322:33Not applicable
Mpevmsg.dll4.4.0304.0111,59224-Oct-201322:33Not applicable
Mpuxhostproxy.dll4.4.0304.028,91224-Oct-201322:33Not applicable
Mpuxsrv.exe4.4.0304.052,82424-Oct-201322:33Not applicable
Windows.defender.lnkNot applicable1,13925-Jul-201220:18Not applicable
Mpasdesc.dll4.4.0304.0152,55224-Oct-201322:33Not applicable
Mpclient.dll4.4.0304.0660,18424-Oct-201322:33Not applicable
Mpcmdrun.exe4.4.0304.0269,56825-Oct-201303:51Not applicable
Mpcommu.dll4.4.0304.0264,88024-Oct-201322:33Not applicable
Mpoav.dll4.4.0304.091,28824-Oct-201322:33Not applicable
Mprtp.dll4.4.0304.0372,66424-Oct-201322:33Not applicable
Mpsvc.dll4.4.0304.01,216,64824-Oct-201322:33Not applicable
Mptpmatt.dll4.4.0304.050,19224-Oct-201322:33Not applicable
Msmpcom.dll4.4.0304.056,32025-Oct-201303:39Not applicable
Msmpeng.exe4.4.0304.015,53625-Oct-201303:51Not applicable
Msmplics.dll4.4.0304.022,30424-Oct-201322:33Not applicable
Eppmanifest.dll4.4.0304.0155,11224-Oct-201322:33Not applicable
Msascui.exe4.4.0304.01,046,85624-Oct-201322:33Not applicable
Msmpres.dll4.4.0304.0440,80824-Oct-201322:33Not applicable
For all supported x86-based versions of Windows 8
File nameFile versionFile sizeDateTimePlatform
Wdboot.sys4.4.0304.030,22425-Oct-201304:56x86
Wdfilter.sys4.4.0304.0213,33624-Oct-201322:33x86
Wdboot.sys4.4.0304.030,22425-Oct-201300:35x86
Wdfilter.sys4.4.0304.0213,33624-Oct-201322:35x86
Mpevmsg.dll4.4.0304.0109,72824-Oct-201322:33x86
Mpevmsg.dll4.4.0304.0109,72824-Oct-201322:35x86
Mpuxhostproxy.dll4.4.0304.028,99224-Oct-201322:33x86
Mpuxsrv.exe4.4.0304.051,25624-Oct-201322:33x86
Windows.defender.lnkNot applicable1,13925-Jul-201220:24Not applicable
Mpuxhostproxy.dll4.4.0304.028,99224-Oct-201322:35x86
Mpuxsrv.exe4.4.0304.051,25624-Oct-201322:35x86
Windows.defender.lnkNot applicable1,13925-Jul-201220:24Not applicable
Dbghelp.dll6.12.0002.6331,213,20007-Nov-201218:36x86
Mpasdesc.dll4.4.0304.0150,68824-Oct-201322:33x86
Mpclient.dll4.4.0304.0661,04024-Oct-201322:33x86
Mpcmdrun.exe4.4.0304.0291,24825-Oct-201304:54x86
Mpcommu.dll4.4.0304.0271,52024-Oct-201322:33x86
Mpoav.dll4.4.0304.0115,64024-Oct-201322:33x86
Mprtp.dll4.4.0304.0388,85624-Oct-201322:33x86
Mpsvc.dll4.4.0304.01,204,00024-Oct-201322:33x86
Mptpmatt.dll4.4.0304.049,72024-Oct-201322:33x86
Msmpcom.dll4.4.0304.057,85625-Oct-201304:44x86
Msmpeng.exe4.4.0304.014,48025-Oct-201304:54x86
Msmplics.dll4.4.0304.020,40824-Oct-201322:33x86
Symsrv.dll6.12.0002.633131,85607-Nov-201218:36x86
Symsrv.yesNot applicable107-Nov-201218:36Not applicable
Dbghelp.dll6.12.0002.6331,213,20006-Nov-201223:04x86
Mpasdesc.dll4.4.0304.0150,68824-Oct-201322:35x86
Mpclient.dll4.4.0304.0661,04024-Oct-201322:35x86
Mpcmdrun.exe4.4.0304.0291,24825-Oct-201300:35x86
Mpcommu.dll4.4.0304.0271,52024-Oct-201322:35x86
Mpoav.dll4.4.0304.0115,64024-Oct-201322:35x86
Mprtp.dll4.4.0304.0388,85624-Oct-201322:35x86
Mpsvc.dll4.4.0304.01,204,00024-Oct-201322:35x86
Mptpmatt.dll4.4.0304.049,72024-Oct-201322:35x86
Msmpcom.dll4.4.0304.057,85625-Oct-201300:20x86
Msmpeng.exe4.4.0304.014,48025-Oct-201300:35x86
Msmplics.dll4.4.0304.020,40824-Oct-201322:35x86
Symsrv.dll6.12.0002.633131,85606-Nov-201223:04x86
Symsrv.yesNot applicable106-Nov-201223:04Not applicable
Eppmanifest.dll4.4.0304.0153,24824-Oct-201322:33x86
Msascui.exe4.4.0304.01,012,82424-Oct-201322:33x86
Msmpres.dll4.4.0304.0438,94424-Oct-201322:33x86
Eppmanifest.dll4.4.0304.0153,24824-Oct-201322:35x86
Msascui.exe4.4.0304.01,012,82424-Oct-201322:35x86
Msmpres.dll4.4.0304.0438,94424-Oct-201322:35x86
For all supported x64-based versions of Windows 8
File nameFile versionFile sizeDateTimePlatform
Wdboot.sys4.4.0304.035,85625-Oct-201307:34x64
Wdfilter.sys4.4.0304.0248,24024-Oct-201322:34x64
Wdboot.sys4.4.0304.035,85625-Oct-201304:50x64
Wdfilter.sys4.4.0304.0248,24024-Oct-201322:35x64
Mpevmsg.dll4.4.0304.0109,72824-Oct-201322:34x64
Mpevmsg.dll4.4.0304.0109,72824-Oct-201322:35x64
Mpuxhostproxy.dll4.4.0304.028,03224-Oct-201322:34x64
Mpuxsrv.exe4.4.0304.055,98424-Oct-201322:34x64
Windows.defender.lnkNot applicable1,13925-Jul-201220:21Not applicable
Mpuxhostproxy.dll4.4.0304.028,03224-Oct-201322:35x64
Mpuxsrv.exe4.4.0304.055,98424-Oct-201322:35x64
Windows.defender.lnkNot applicable1,13925-Jul-201220:21Not applicable
Dbghelp.dll6.12.0002.6331,558,91207-Nov-201223:04x64
Mpasdesc.dll4.4.0304.0150,68824-Oct-201322:34x64
Mpclient.dll4.4.0304.0868,44824-Oct-201322:34x64
Mpcmdrun.exe4.4.0304.0338,27225-Oct-201307:34x64
Mpcommu.dll4.4.0304.0348,37624-Oct-201322:34x64
Mpoav.dll4.4.0304.0118,77624-Oct-201322:34x64
Mprtp.dll4.4.0304.0507,39224-Oct-201322:34x64
Mpsvc.dll4.4.0304.01,571,32824-Oct-201322:34x64
Mptpmatt.dll4.4.0304.051,82424-Oct-201322:34x64
Msmpcom.dll4.4.0304.066,04825-Oct-201306:18x64
Msmpeng.exe4.4.0304.016,04825-Oct-201307:34x64
Msmplics.dll4.4.0304.020,40824-Oct-201322:34x64
Symsrv.dll6.12.0002.633149,26407-Nov-201223:04x64
Symsrv.yesNot applicable107-Nov-201223:04Not applicable
Dbghelp.dll6.12.0002.6331,558,91206-Nov-201223:04x64
Mpasdesc.dll4.4.0304.0150,68824-Oct-201322:35x64
Mpclient.dll4.4.0304.0868,44824-Oct-201322:35x64
Mpcmdrun.exe4.4.0304.0338,27225-Oct-201304:50x64
Mpcommu.dll4.4.0304.0348,37624-Oct-201322:35x64
Mpoav.dll4.4.0304.0118,77624-Oct-201322:35x64
Mprtp.dll4.4.0304.0507,39224-Oct-201322:35x64
Mpsvc.dll4.4.0304.01,571,32824-Oct-201322:35x64
Mptpmatt.dll4.4.0304.051,82424-Oct-201322:35x64
Msmpcom.dll4.4.0304.066,04825-Oct-201300:07x64
Msmpeng.exe4.4.0304.016,04825-Oct-201304:50x64
Msmplics.dll4.4.0304.020,40824-Oct-201322:35x64
Symsrv.dll6.12.0002.633149,26406-Nov-201223:04x64
Symsrv.yesNot applicable106-Nov-201223:04Not applicable
Eppmanifest.dll4.4.0304.0153,24824-Oct-201322:34x64
Msascui.exe4.4.0304.01,330,79224-Oct-201322:34x64
Msmpres.dll4.4.0304.0438,94424-Oct-201322:34x64
Eppmanifest.dll4.4.0304.0153,24824-Oct-201322:35x64
Msascui.exe4.4.0304.01,330,79224-Oct-201322:35x64
Msmpres.dll4.4.0304.0438,94424-Oct-201322:35x64
Mpasdesc.dll4.4.0304.0150,68824-Oct-201322:33x86
Mpclient.dll4.4.0304.0661,04024-Oct-201322:33x86
Mpoav.dll4.4.0304.0115,64024-Oct-201322:33x86
Msmplics.dll4.4.0304.020,40824-Oct-201322:33x86
Mpasdesc.dll4.4.0304.0150,68824-Oct-201322:35x86
Mpclient.dll4.4.0304.0661,04024-Oct-201322:35x86
Mpoav.dll4.4.0304.0115,64024-Oct-201322:35x86
Msmplics.dll4.4.0304.020,40824-Oct-201322:35x86
Windows RT 8.1 and Windows 8.1 file information notes
Important Windows 8.1 hotfixes and Windows Server 2012 R2 hotfixes are included in the same packages. However, only "Windows 8.1" is listed on the Hotfix Request page. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 8.1" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table: ERROR: PhantomJS timeout occurred