wddefs are not downloaded (trunk 1106)

[Gerby]

Hi!

It seems that the defender definition files are not downloaded at all (here: trunk 1106). I know about the changed behavior by Microsoft and about the workaround with the user agent. This should be handled in trunk 1106 already. However, there still seems to be a problem.

I've even tried using a fresh trunk, activating the corresponding option in the Generator window. No wddefs directory after download session at all.

The logs don't give any hints.

Greetz
Mark

[hbuhrmester]

The option /includewddefs is sometimes changed to /includemsse internally, depending on the Windows version.

In WSUS Offline Update 11.8.3, it used to be:

Code: Select all

if /i "%3"=="/includemsse" set INC_MSSE=1
if /i "%3"=="/includewddefs" (
  echo %1 | %SystemRoot%\System32\find.exe /I "w62" >nul 2>&1
  if errorlevel 1 (
    echo %1 | %SystemRoot%\System32\find.exe /I "w63" >nul 2>&1
    if errorlevel 1 (
      echo %1 | %SystemRoot%\System32\find.exe /I "w100" >nul 2>&1
      if errorlevel 1 (set INC_WDDEFS=1) else (set INC_MSSE=1)
    ) else (set INC_MSSE=1)
  )
)

This means: For Windows 8, 8.1 and 10, /includewddefs is treated like /includemsse.

Now, since Changeset 1103, it is:

Code: Select all

if /i "%3"=="/includemsse" set INC_MSSE=1
if /i "%3"=="/includewddefs" set INC_MSSE=1

This means, that /includewddefs is always treated as /includemsse, and the old definition updates for Windows Vista and 7 are not used anymore.

This may be related to the upcoming removal of Windows 7. On the other hand, the file doc/history.txt in Changeset 1106 says, that Version 11.9 will be the last one supporting Windows 7.

Regards,
hbuhrmester

[Gerby]

Thanks for the hint, hbuhrmester.

I wasn't aware that the defender definition files in the wddefs directory are not used globally (i.e. for all Win versions). The transition thesis of moving away from Win 7 in the latest trunks makes sense.

[WSUSUpdateAdmin]

Hi.

It seemed to me that mpas-fe.exe wasn't maintained any longer, but that was because of the missing "user agent" download option; it's still updated by MS.
So, I'll revert the changes done in r1103 until W7 will be finally removed.

Thanks,
Torsten