Partager via

Event ID 2003 — Microsoft Antimalware Engine Update

  • Article

Applies To: Windows Server 2008

The Microsoft Antimalware Engine version is updated frequently to detect and remove the latest spyware or other potentially unwanted software. The Microsoft Antimalware Engine must be started and functioning correctly for a scan to successfully complete.

Event Details

Product: Windows Defender
ID: 2003
Source: Microsoft-Windows-Windows Defender
Version: 1.1
Symbolic Name: MALWAREPROTECTION_ENGINE_UPDATE_FAILED
Message: %1 has encountered an error trying to update the engine.
%tNew Engine Version:%b%3
%tPrevious Engine Version:%b%4
%tUpdate Source:%b%6
%tUser:%b%8\%9
%tError Code:%b%11
%tError description:%b%12

Resolve

Update scanning engine by using Windows Defender

To determine how to fix this error condition, examine the error code reported in the event message text.

The event message can report the following error codes:

  • INSTALL ALREADY RUNNING (0x80070652)
  • ERROR_FILE_NOT_FOUND (0x80070002)
  • TRUST_E_NOSIGNATURE (0x800B0100)
  • ERROR_PRODUCT_VERSION (0x80010666)
  • E_OUTOFMEMORY (0x8007000E)
  • ERR_MP_BADDB_NOTSIGNED (0x8050A005)
  • ERR_MP_BADDB_HEADER (0x8050A002)
  • ERR_MP_BADDB_CONTENT (0x8050A004)
  • ERR_MP_BAD_DATABASE (0x80508002)
  • ERR_MP_BAD_UFS (0x80508004)
  • ERR_MP_BADDB_OPEN (0x8050A001)
  • ERR_MP_BAD_INIT_MODULES (0x80508001)
  • ERR_MP_BAD_INPUT_DATA (0x8050800C)

To perform these procedures, you must be a member of the Administrators group, or you must have been delegated the appropriate authority.

INSTALL ALREADY RUNNING (0x80070652)

This error code indicates that an update to the scanning engine is already in progress. Try to run this update again later.

ERROR_FILE_NOT_FOUND (0x80070002)

This error code indicates that the engine update file was not found. This can happen if you are deploying scanning engine updates by using a script or batch file. Ensure that the path to the scanning engine update is correctly specified in the script or batch file and try to run it again.

TRUST_E_NOSIGNATURE (0x800B0100)

This error code indicates that one or more of the scanning engine update files were not signed. Update the scanning engine by using Windows Defender.

To update the scanning engine by using Windows Defender:

  1. Click Start, point to All Programs, and then click Windows Defender.
  2. Click the down arrow next to the help icon, and then click Check for updates.
  3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  4. A message will appear in the notification area informing you that the updates have been installed.

ERROR_PRODUCT_VERSION (0x80010666)

This error code indicates that the scanning engine update and definition database versions are not compatible. This can happen if you are deploying a scanning engine update by using a script or batch file. You should download the latest updates by using Windows Defender or by downloading the updates manually and adding them to a script or batch file.

To update the scanning engine by using Windows Defender:

  1. Click Start, point to All Programs, and then click Windows Defender.
  2. Click the down arrow next to the help icon, and then click Check for updates.
  3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  4. A message will appear in the notification area informing you that the updates have been installed.

If you are deploying updates by using a script or batch file, click the appropriate link to the latest definition update for Windows Defender, download the update, and then update your script or batch file.

For more information about manually downloading Windows Defender updates, see article 923159 in the Microsoft Knowledge Base (https://go.microsoft.com/fwlink/?LinkId=99360).

E_OUTOFMEMORY (0x8007000E)

This error code indicates that your computer is low on resources. You should free up some memory on your computer.

To free up memory on your computer:

  1. Right-click the taskbar, and then click Task Manager.
  2. Click the Applications tab and make sure the status of all tasks is Running. If any tasks have the status Not responding, you can end the task by clicking End Task.
  3. Click the Processes tab.
  4. Click Memory and investigate processes that are using a lot of memory.
  5. If there are no tasks with the status Not responding or processes that are using a lot of memory, you should restart the computer to free up memory.

Note: You can only end processes that were created by you when logged on as a member of the Users group. To end processes that are running in the context of the SYSTEM account, you must log on to the computer as a member of the Adminstrators group.

ERR_MP_BADDB_NOTSIGNED (0x8050A005)

This error code indicates that the definition files are not signed. You should update the definition files by using Windows Defender. If there are no updates available, you should restart the computer.

To update the scanning engine by using Windows Defender:

  1. Click Start, point to All Programs, and then click Windows Defender.
  2. Click the down arrow next to the help icon, and then click Check for updates.
  3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  4. A message will appear in the notification area informing you that the updates have been installed.

ERR_MP_BADDB_HEADER (0x8050A002)

This error code indicates that the Windows Defender definition database is not valid or is corrupted. You should update the definition database by using Windows Defender. If there are no updates available, you should restart the computer.

To update the definition database by using Windows Defender:

  1. Click Start, point to All Programs, and then click Windows Defender.
  2. Click the down arrow next to the help icon, and then click Check for updates.
  3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  4. A message will appear in the notification area informing you that the updates have been installed.

ERR_MP_BADDB_CONTENT (0x8050A004)

This error code indicates that the Windows Defender definition database is not valid or is corrupted. You should update the definition database by using Windows Defender. If there are no updates available, you should restart the computer.

To update the definition database by using Windows Defender:

  1. Click Start, point to All Programs, and then click Windows Defender.
  2. Click the down arrow next to the help icon, and then click Check for updates.
  3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  4. A message will appear in the notification area informing you that the updates have been installed.

ERR_MP_BAD_DATABASE (0x80508002)

This error code indicates that the Windows Defender definition database is not valid or is corrupted. You should update the definition database by using Windows Defender. If there are no updates available, you should restart the computer.

To update the definition database by using Windows Defender:

  1. Click Start, point to All Programs, and then click Windows Defender.
  2. Click the down arrow next to the help icon, and then click Check for updates.
  3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  4. A message will appear in the notification area informing you that the updates have been installed.

ERR_MP_BAD_UFS (0x80508004)

This error code indicates that the Windows Defender definition database is not valid or is corrupted. You should update the definition database by using Windows Defender. If there are no updates available, you should restart the computer.

To update the definition database by using Windows Defender:

  1. Click Start, point to All Programs, and then click Windows Defender.
  2. Click the down arrow next to the help icon, and then click Check for updates.
  3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  4. A message will appear in the notification area informing you that the updates have been installed.

ERR_MP_BADDB_OPEN (0x8050A001)

This error code indicates that the scanning engine did not load because it could not load the definition database. You should update the definition database by using Windows Defender. If there are no updates available, you should restart the computer.

To update the scanning engine by using Windows Defender:

  1. Click Start, point to All Programs, and then click Windows Defender.
  2. Click the down arrow next to the help icon, and then click Check for updates.
  3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  4. A message will appear in the notification area informing you that the updates have been installed.

ERR_MP_BAD_INIT_MODULES (0x80508001)

This error code indicates that the scanning engine did not load because of an internal error. You should check for updates to Windows Defender. If there are no updates available, you should restart the computer.

To check for updates to Windows Defender:

  1. Click Start, point to All Programs, and then click Windows Defender.
  2. Click the down arrow next to the help icon, and then click Check for updates.
  3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  4. A message will appear in the notification area informing you that the updates have been installed.

ERR_MP_BAD_INPUT_DATA (0x8050800C)

This error code indicates that the scanning engine did not load because of an internal error. You should check for updates to Windows Defender. If there are no updates available, you should restart the computer.

To update the scanning engine by using Windows Defender:

  1. Click Start, point to All Programs, and then click Windows Defender.
  2. Click the down arrow next to the help icon, and then click Check for updates.
  3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  4. A message will appear in the notification area informing you that the updates have been installed.

Verify

Windows Defender uses the scanning engine to run Windows Defender scans. To verify that the scanning engine updated successfully and is working correctly, you should run a Windows Defender quick scan.

To perform this procedure, you must be a member of the Users group, or you must have been delegated the appropriate authority.

To verify that the scanning engine updated successfully and is working correctly:

  1. Click Start, point to All Programs, and then click Windows Defender.
  2. Click the down arrow next to Scan, and then click Quick Scan.
  3. If the quick scan completes successfully, the scanning engine was updated successfully and is working correctly.

Microsoft Antimalware Engine Update

Windows Defender