Windows 7 Constantly re-installing same updates

[Java Jive]

This PC is running Windows 7 64-bit with Microsoft Security Essentials.
As of today, the same updates of the latter have begun repeatedly trying
to install themselves ...

Security Intelligence Update for Microsoft Security Essentials -
KB2310138 (Version 1.393.302)

... installed itself 6 times before I decided to hide it. Then ...

Security Intelligence Update for Microsoft Security Essentials -
KB2310138 (Version 1.393.273)

... installed itself once and then wanted to install a second time so I
hid that. Now ...

Security Intelligence Update for Microsoft Security Essentials -
KB2310138 (Version 1.393.235)

... wants to install itself despite the above higher version numbers
having previously been installed successfully.

Early on in the process, I rebooted the PC, and a Malwarebytes Scan
finds nothing.

Anyone else seeing this or similar?

[David E. Ross]

Post by Java Jive
This PC is running Windows 7 64-bit with Microsoft Security Essentials.
As of today, the same updates of the latter have begun repeatedly trying
to install themselves ...
Security Intelligence Update for Microsoft Security Essentials -
KB2310138 (Version 1.393.302)
... installed itself 6 times before I decided to hide it. Then ...
Security Intelligence Update for Microsoft Security Essentials -
KB2310138 (Version 1.393.273)
... installed itself once and then wanted to install a second time so I
hid that. Now ...
Security Intelligence Update for Microsoft Security Essentials -
KB2310138 (Version 1.393.235)
... wants to install itself despite the above higher version numbers
having previously been installed successfully.
Early on in the process, I rebooted the PC, and a Malwarebytes Scan
finds nothing.
Anyone else seeing this or similar?

Those are updates of the virus database used by Microsoft Security
Essentials to detect malware. As new malware -- viruses, phishing
attempts, ransom-ware, etc -- are found, the database must be constantly
updated if Security Essentials is going to provide you with any
protection.

My primary protection is AVG AntiVirus. It too gets database updates at
least daily. When I download a new application or an update to an
existing application, I always check it with AVG AntiVirus, Security
Essentials, and Malwarebytes. I generally do not have Security
Essentials or Malwarebytes running, so they do not get automatic
updates. But for downloaded application installers, I manually request
all the updates to the database for Security Essentials, which I then
request to scan the downloaded file. Malwarebytes automatically updates
its database when I request it to scan a downloaded file.

[Java Jive]

Post by David E. Ross

Post by Java Jive
This PC is running Windows 7 64-bit with Microsoft Security Essentials.
As of today, the same updates of the latter have begun repeatedly trying
to install themselves ...
Security Intelligence Update for Microsoft Security Essentials -
KB2310138 (Version 1.393.302)
... installed itself 6 times before I decided to hide it. Then ...
Security Intelligence Update for Microsoft Security Essentials -
KB2310138 (Version 1.393.273)
... installed itself once and then wanted to install a second time so I
hid that. Now ...
Security Intelligence Update for Microsoft Security Essentials -
KB2310138 (Version 1.393.235)
... wants to install itself despite the above higher version numbers
having previously been installed successfully.
Early on in the process, I rebooted the PC, and a Malwarebytes Scan
finds nothing.
Anyone else seeing this or similar?

Those are updates of the virus database used by Microsoft Security
Essentials to detect malware. As new malware -- viruses, phishing
attempts, ransom-ware, etc -- are found, the database must be constantly
updated if Security Essentials is going to provide you with any
protection.

Yes, all true, but the point is that it is the *SAME* version of the
malware database update that is constantly reinstalling, *NOT* a new
version. It's as though the system is suddenly not remembering that it
has just installed that update. And when I decided to calm things down
by hiding the update that had already been installed, it simply went
back to an older version that previously had been skipped, probably
because while the PC was off in between sessions the version number had
increased by 2 or more versions.

[Paul]

Post by David E. Ross

Post by Java Jive
This PC is running Windows 7 64-bit with Microsoft Security Essentials.
As of today, the same updates of the latter have begun repeatedly trying
to install themselves ...
Security Intelligence Update for Microsoft Security Essentials -
KB2310138 (Version 1.393.302)
... installed itself 6 times before I decided to hide it. Then ...
Security Intelligence Update for Microsoft Security Essentials -
KB2310138 (Version 1.393.273)
... installed itself once and then wanted to install a second time so I
hid that.  Now ...
Security Intelligence Update for Microsoft Security Essentials -
KB2310138 (Version 1.393.235)
... wants to install itself despite the above higher version numbers
having previously been installed successfully.
Early on in the process, I rebooted the PC, and a Malwarebytes Scan
finds nothing.
Anyone else seeing this or similar?

Those are updates of the virus database used by Microsoft Security
Essentials to detect malware.  As new malware -- viruses, phishing
attempts, ransom-ware, etc -- are found, the database must be constantly
updated if Security Essentials is going to provide you with any
protection.

Yes, all true, but the point is that it is the *SAME* version of the malware database update that is constantly reinstalling, *NOT* a new version.  It's as though the system is suddenly not remembering that it has just installed that update.  And when I decided to calm things down by hiding the update that had already been installed, it simply went back to an older version that previously had been skipped, probably because while the PC was off in between sessions the version number had increased by 2 or more versions.

You can do an Offline Scan, with the media offering in the pulldown
at the bottom of this page. This is in case it's a recent rootkit
causing the behavior. Based on the recent events of the last couple
days, only a fool would be running a "driver updater automation" today,
because it could easily pull one of the affected drivers into the machine.
And some individuals here, are running such updater-trash right now.
I would hate to be them right now, is all I can say. One individual
(not here), runs a Dell Updater thing, for a machine that is well
out of service (and it just keeps doing stuff, which I presume
makes him happy). I've warned him before to dump that trash.

https://support.microsoft.com/en-us/windows/help-protect-my-pc-with-microsoft-defender-offline-9306d528-64bf-4668-5b80-ff533f183d6c

I do not know, if there is a specific repair sequence for the normal
online scanner itself. I don't know what you're supposed to reinstall,
or what folders need to be cleared out.

Windows Update itself should have a log, and it might be a bit
easier to work with than WindowsUpdate.log that the other later
OSes get only via the issuance of a Powershell command. There should be
a Windows Update Reset Script (like in Control Panels : Troubleshooting),
but we don't know at this point, whether the trouble is at the
Windows Update level or not. I guess I'm showing my bias, by assuming
something has tipped over your defenses and this has something to
do with the repetitive behavior.

It can't be a SHA2 signing issue -- unless this is a brand new install
you did yesterday.

While a certain number of updates a day is to be expected, a user
can usually notice when something is in a patch loop. Sometimes
the user senses their machine is "in a mood" or "is on a tear",
and there is a lot of abnormal disk access and so on. This happens
sometimes around Patch Tuesday timeframe.

Paul

[Java Jive]

Post by Paul
You can do an Offline Scan, with the media offering in the pulldown
at the bottom of this page. This is in case it's a recent rootkit
causing the behavior. Based on the recent events of the last couple
days, only a fool would be running a "driver updater automation" today,
because it could easily pull one of the affected drivers into the machine.
And some individuals here, are running such updater-trash right now.
I would hate to be them right now, is all I can say. One individual
(not here), runs a Dell Updater thing, for a machine that is well
out of service (and it just keeps doing stuff, which I presume
makes him happy). I've warned him before to dump that trash.
https://support.microsoft.com/en-us/windows/help-protect-my-pc-with-microsoft-defender-offline-9306d528-64bf-4668-5b80-ff533f183d6c

Tx, downloaded to the tool, wiped a USB stick in preparation and ran the
tool, but it gave the following error when trying to connect to the
internet ...

Error code: 0002-80072F8F

... which seems to be some sort of authentication issue.

Think I have to revert to my last good back-up ...

"I may be gone some while!"

[Brian Gregory]

Maybe the malware signature database is corrupt.

Try starting an elevated command prompt and doing:

cd /d "C:\Program Files\Microsoft Security Client"
MpCmdRun.exe -removedefinitions -dynamicsignatures

Then immediately reboot the PC.

Once the PC has rebooted go into security essentials and tell it to
update. That should make it re-download the complete malware database.

[Brian Gregory]

Maybe the malware signature database is corrupt.

My own experiences with this solution are coming back to me now.

So don't so what my last reply said, do this instead:
Start an elevated command prompt (run as Administrator) and do:

cd /d "C:\Program Files\Microsoft Security Client"
MpCmdRun.exe -RemoveDefinitions -All
MpCmdRun.exe -SignatureUpdate

[Java Jive]

Post by Brian Gregory
Maybe the malware signature database is corrupt.
My own experiences with this solution are coming back to me now.
cd /d "C:\Program Files\Microsoft Security Client"
MpCmdRun.exe -RemoveDefinitions -All
MpCmdRun.exe -SignatureUpdate

Thanks for the suggestion, which seemed to the point and reasonable, so
I tried it, but it didn't work. So then I tried a more extreme version
of uninstalling Microsoft Security Client, and reinstalling it, but that
didn't fix it either. I think that most probably I'm going to have to
revert to my last system disk back-up.

[Brian Gregory]

Post by Java Jive

Post by Brian Gregory
Maybe the malware signature database is corrupt.
My own experiences with this solution are coming back to me now.
cd /d "C:\Program Files\Microsoft Security Client"
MpCmdRun.exe -RemoveDefinitions -All
MpCmdRun.exe -SignatureUpdate

Thanks for the suggestion, which seemed to the point and reasonable, so
I tried it, but it didn't work.

How could you tell so quickly?

Post by Java Jive
So then I tried a more extreme version
of uninstalling Microsoft Security Client, and reinstalling it, but that
didn't fix it either.  I think that most probably I'm going to have to
revert to my last system disk back-up.

Okay.

[Java Jive]

Post by Brian Gregory

Post by Java Jive

Post by Brian Gregory
Maybe the malware signature database is corrupt.
My own experiences with this solution are coming back to me now.
cd /d "C:\Program Files\Microsoft Security Client"
MpCmdRun.exe -RemoveDefinitions -All
MpCmdRun.exe -SignatureUpdate

Thanks for the suggestion, which seemed to the point and reasonable,
so I tried it, but it didn't work.

How could you tell so quickly?

Because the Windows Update, immediately after installing one Microsoft
Security Client updated, still wanted to install it again.

Post by Brian Gregory

Post by Java Jive
So then I tried a more extreme version of uninstalling Microsoft
Security Client, and reinstalling it, but that didn't fix it either.
I think that most probably I'm going to have to revert to my last
system disk back-up.

Now, done, but here's the rub, it hasn't fixed the problem, and now it's
happening on another PC which doesn't have Microsoft Security Essentials
installed, this time with the equivalent Windows Defender Anti-Virus
updates, so it's beginning to look like it might actually be a Microshit
balls up after all.

[JJ]

Post by Java Jive
Yes, all true, but the point is that it is the *SAME* version of the
malware database update that is constantly reinstalling, *NOT* a new
version. It's as though the system is suddenly not remembering that it
has just installed that update. And when I decided to calm things down
by hiding the update that had already been installed, it simply went
back to an older version that previously had been skipped, probably
because while the PC was off in between sessions the version number had
increased by 2 or more versions.

They're not the same versions, and there's nothing wrong with your PC.

But it's unusual for multiple versions of the same update to be released
within the same day.

https://www.catalog.update.microsoft.com/Search.aspx?q=KB2310138

Chances are that, Microsoft kept making errors on fixing the KB2310138
update.

[Java Jive]

Post by JJ

Post by Java Jive
Yes, all true, but the point is that it is the *SAME* version of the
malware database update that is constantly reinstalling, *NOT* a new
version. It's as though the system is suddenly not remembering that it
has just installed that update. And when I decided to calm things down
by hiding the update that had already been installed, it simply went
back to an older version that previously had been skipped, probably
because while the PC was off in between sessions the version number had
increased by 2 or more versions.

They're not the same versions, and there's nothing wrong with your PC.

They *ARE* the same version! Reread my OP where I explain that the same
version installed itself 6 times before I hid it.

Post by JJ
But it's unusual for multiple versions of the same update to be released
within the same day.
https://www.catalog.update.microsoft.com/Search.aspx?q=KB2310138
Chances are that, Microsoft kept making errors on fixing the KB2310138
update.

No, chances are not that, because, if that was so, everyone else would
be complaining about it as well, whereas the fact is that no-one else
here has reported having the problem.

[Java Jive]

Post by Java Jive

Post by JJ
Chances are that, Microsoft kept making errors on fixing the KB2310138
update.

No, chances are not that, because, if that was so, everyone else would
be complaining about it as well, whereas the fact is that no-one else
here has reported having the problem.

Except that as just posted in another reply here, I now have the problem
on another PC as well, so may be ...

[Sailfish]

Post by Java Jive

Post by Java Jive

Post by JJ
Chances are that, Microsoft kept making errors on fixing the KB2310138
update.

No, chances are not that, because, if that was so, everyone else would
be complaining about it as well, whereas the fact is that no-one else
here has reported having the problem.

Except that as just posted in another reply here, I now have the problem
on another PC as well, so may be ...

I can confirm it just started 0n Jul 12 and continues to recycle the
same update after it installed the previous one.

curiouser and curiouser

[Java Jive]

Post by Sailfish

Post by Java Jive
Except that as just posted in another reply here, I now have the
problem on another PC as well, so may be ...

I can confirm it just started 0n Jul 12 and continues to recycle the
same update after it installed the previous one.
curiouser and curiouser

Now appears to be fixed. Must have been a Microshit problem.

[David E. Ross]

Post by Java Jive

Post by Sailfish

Post by Java Jive
Except that as just posted in another reply here, I now have the
problem on another PC as well, so may be ...

I can confirm it just started 0n Jul 12 and continues to recycle the
same update after it installed the previous one.
curiouser and curiouser

Now appears to be fixed. Must have been a Microshit problem.

I hope you are still getting the daily updates to the virus database.
Each day, I get them. They each have different version numbers and sizes.

[Java Jive]

Post by David E. Ross

Post by Java Jive

Post by Sailfish

Post by Java Jive
Except that as just posted in another reply here, I now have the
problem on another PC as well, so may be ...

I can confirm it just started 0n Jul 12 and continues to recycle the
same update after it installed the previous one.
curiouser and curiouser

Now appears to be fixed. Must have been a Microshit problem.

I hope you are still getting the daily updates to the virus database.
Each day, I get them. They each have different version numbers and sizes.

Of course. New versions are installing, but they're no longer
installing repeatedly, which was the problem before.

[Sailfish]

Post by Java Jive

Post by Sailfish

Post by Java Jive
Except that as just posted in another reply here, I now have the
problem on another PC as well, so may be ...

I can confirm it just started 0n Jul 12 and continues to recycle the
same update after it installed the previous one.
curiouser and curiouser

Now appears to be fixed. Must have been a Microshit problem.

Thanks for the update. I'll again start allowing the updates to install.