PSA: Critical Windows Defender anti-malware platform update

[Arthur]

Microsoft have released an update that changes the location of several key Windows Defender executables. If you block applications running from the %ProgramData% folder with AppLocker/SRP there may be issues if the new location isn't whitelisted.

 

Source: Microsoft (via Twitter)

 

This package includes monthly updates and fixes to the Windows Defender anti-malware platform that is used by Windows Defender Antivirus in Windows 10.

 

Monthly updates are installed in addition to major Windows 10 releases. Both types of updates should be installed to ensure continued protection against malware and other threats.

 

This update is the first monthly update that is released separately from a major Windows release. Regular monthly updates are now being provided in addition to the standard performance updates. These monthly updates apply to Windows 10 Version 1703 and Version 1709.

 

File location changes

This update makes the following binary location changes.