if exist "%IMAGE%\ProgramData\Microsoft\Windows Defender" (
echo KB915597 - Windows Defender Definition
if exist "%IMAGE%\ProgramData\Microsoft\Windows Defender" (
if exist "%IMAGE%\ProgramData\Microsoft\Windows Defender\Definition Updates" (
takeown /F "%IMAGE%\ProgramData\Microsoft\Windows Defender\Definition Updates" /A >nul 2>nul
icacls "%IMAGE%\ProgramData\Microsoft\Windows Defender\Definition Updates" /grant Administrators:F >nul 2>nul
rd /q /s "%IMAGE%\ProgramData\Microsoft\Windows Defender\Definition Updates" >nul 2>nul
)
)
md "%IMAGE%\ProgramData\Microsoft\Windows Defender\Definition Updates"
md "%IMAGE%\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates"
md "%IMAGE%\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup"
"%~dp0apps\7z\%PROCESSOR_ARCHITECTURE%\7z.exe" x "%~dp0updates\mpas-fe-%ARCH%.exe" -o"%IMAGE%\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates" >nul
if exist "%IMAGE%\Windows\System32\MpSigStub.exe" (
takeown /F "%IMAGE%\Windows\System32\MpSigStub.exe" /A >nul 2>nul
icacls "%IMAGE%\Windows\System32\MpSigStub.exe" /grant Administrators:F >nul 2>nul
del /q /s "%IMAGE%\Windows\System32\MpSigStub.exe" >nul
)
move /y "%IMAGE%\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates\MpSigStub.exe" "%IMAGE%\Windows\System32\MpSigStub.exe" >nul
icacls "%IMAGE%\Windows\System32\MpSigStub.exe" /setowner "NT SERVICE\TrustedInstaller" >nul
icacls "%IMAGE%\Windows\System32\MpSigStub.exe" /grant:r Administrators:RX >nul
icacls "%IMAGE%\ProgramData\Microsoft\Windows Defender\Definition Updates" /setowner "NT SERVICE\TrustedInstaller" >nul
icacls "%IMAGE%\ProgramData\Microsoft\Windows Defender\Definition Updates" /grant:r Administrators:RX >nul
attrib +h "%IMAGE%\ProgramData" >nul
)