Delta updates restore deleted components!

V

Vatman

New Member
File recovery also occurs when the update is integrated into the image, even before the installation of the system.
The manifest is present in Update KB4476976:
amd64_windows-shield-provider_31bf3856ad364e35_10.0.17763.292_none_1a853d50533016d4.manifest
This component is from Defender

In which the restoration of this component is set:
C:\Windows\WinSxS\amd64_windows-shield-provider_31bf3856ad364e35_10.0.17763.1_none_96bbacb325845514
All of his Files:
FeatureToastBulldogImg.png
SecurityHealthAgent.dll
SecurityHealthProxyStub.dll
SecurityHealthService.exe
WindowsDefenderSecurityCenter.admx
WindowsSecurityIcon.png
After updating this component appears:
C:\Windows\WinSxS\amd64_windows-shield-provider_31bf3856ad364e35_10.0.17763.292 ...

Registration section for eventlog
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{928f7d29-0577-5be5-3bd3-b6bdab9ab307}
and all the rest;

Service that is up and running:
HKLM\SYSTEM\CurrentControlSet\Services\SecurityHealthService
her files
SecurityHealthAgent.dll
SecurityHealthService.exe

For those who have deleted registry keys and files after removing the Defender, the update cannot update the system.
We need to look for an update method causes skip deleted components.
Either have to opt out of the update, which is not good!
 
Last edited:
I also noticed some bits being returned here and there, will investigate the one you mentioned and reply back, probably tomorrow.

Thanks for the feedback.
 
Confirmed and fixed, however need to test it some more to see if there are any complications.
Aiming release on next Tuesday.
 
You must log in or register to reply here.
Back
Top