Feeds

OK, we get the message, Microsoft: Windows Defender splats 1000s of WinXP, Server 2k3 PCs

Anti-malware update gaffe trashes axed OSes

The Power of One Brief: Top reasons to choose HP BladeSystem

Microsoft has fixed a snafu with Windows Defender that took down thousands of business PCs and servers running Windows XP and Server 2003.

The software giant responded to sysadmins complaining on TechNet that large numbers of their machines were borked after they’d installed Microsoft’s latest set of antivirus definitions.

Once the dodgy signature update for System Center Endpoint Protection (SCEP) and Forefront Endpoint Protection (FEP) had been installed, it caused PCs and servers to hang at logon until Msmpeng.exe, a core part of Windows Defender, crashed.

The only solution to getting affected machines back up was to uninstall the updated signatures.

One sysadmin took to TechNet to complain of 750 knackered PCs, with another claiming he'd seen 3,500 PCs walloped.

The culprit is a group of antivirus definition updates in SCEP and FEP, released on April 16. The versions most complained about were numbers 1.171.1.0, 171.46.0 and 1.171.39.0.

Redmond told The Reg that applying the latest set of antivirus signatures would rescue affected systems without the need to uninstall the update that caused the problems.

One Reg reader contacted us to say: “Seems like an engine and/or signature update to FEP in combination with a specific setting within FEP crashes FEP, which then knocks out the affected computer from the network.”

A Microsoft spokesperson admitted the company had released an anti-malware engine update that “may have caused interrupted service for customers” using the company’s security products.

The spokesperson said the latest signature update would automatically resolve the issue, implying there’s no need to uninstall the faulty signatures.

“Customers who have developed the most recent signatures do not need to take an action,” the spokesperson said.

Such problems are critical because security products like SCEP and Forefront are now Microsoft’s first and last line of defence for users against malware writers since Microsoft axed all support for Windows XP, and stopped releasing security patches for the ageing operating system, on April 8 this year. Windows Server 2003 remains supported until 14 July, 2015.

The advice for those still running Windows XP and Windows Server 2003 is to apply all the latest anti-virus patches and signatures to systems to try and stay safe. ®

Thanks to Reg reader Nik for the tip.

Using blade systems to cut costs and sharpen efficiencies

More from The Register

next story
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
NO MORE ALL CAPS and other pleasures of Visual Studio 14
Unpicking a packed preview that breaks down ASP.NET
Captain Kirk sets phaser to SLAUGHTER after trying new Facebook app
William Shatner less-than-impressed by Zuck's celebrity-only app
Mozilla fixes CRITICAL security holes in Firefox, urges v31 upgrade
Misc memory hazards 'could be exploited' - and guess what, one's a Javascript vuln
Apple fanbois SCREAM as update BRICKS their Macbook Airs
Ragegasm spills over as firmware upgrade kills machines
Cheer up, Nokia fans. It can start making mobes again in 18 months
The real winner of the Nokia sale is *drumroll* ... Nokia
EU dons gloves, pokes Google's deals with Android mobe makers
El Reg cops a squint at investigatory letters
Chrome browser has been DRAINING PC batteries for YEARS
Google is only now fixing ancient, energy-sapping bug
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.