Bug Microsoft – Antivirus Windows Defender malware gagal scans setelah beberapa detik proses

Bagi yang masih menggunakan Antivirus Windows Defender bawaan Windows Per Bulan September 2019 ini terdapat Bug

Bug terjadi saat Menjalankan Quick Scanatau Full Scan lalu akan gagal setelah beberapa detik berjalan dan hanya berhasil scanning beberapa file, sehingga proses scanning tidak maksimal yang seharusnya membutuhkan waktu cukup banyak sesuai jumlah file yang di scan

Masalah ini telah dilaporkan pada forum dukungan teknologi Microsoft serta forum lainnya agar terdapat penanganan terhadap permasalahan tersebut.

Bug berdampak pada Windows Defender versi 4.18.1908.7 dan yang lebih baru (versi di atasnya), . Bug terjadi ketika Microsoft mencoba untuk memperbaiki bug lain yang diperkenalkan dengan Patch Selasa 2019 Juli.

Solusinya adalah sebagai berikut :

Resolution


This issue is fixed in the version 4.8.1908 update of Windows Defender. After this update is applied, PowerShell files that are part of the Windows image are not changed, and the SFC tool no longer flags these files. Internet-connected computers that subscribe to the Windows Update channel automatically download and install this update.

To repair the Windows image files on computers that have been affected by this issue, use the DISM tool. To do this, open a Command Prompt window on the affected computer, and run the following commands:

   dism /online /cleanup-image /restorehealth
   sfc /scannow

If these commands fail and generate an error message that resembles “File not found,” make sure that the Install.wim file is accessible, and then run the following commands:

 
=======================================================================
DISM /Online /Cleanup-Image /RestoreHealth /Source:WIM:c:\install.wim:1 /LimitAccess
=======================================================================
sfc /scannow
=======================================================================

Source :
https://support.microsoft.com/en-au/help/4513240/sfc-incorrectly-flags-windows-defender-ps-files-as-corrupted

Penyebab dari terjadinya Bug tersebut yaitu :

Cause


This is a known issue in Windows 10, version 1607 and later versions, and Windows Defender version 4.18.1906.3 and later versions up to version 4.8.1908.

The files for the Windows Defender PowerShell module that are located in %windir%\System32\WindowsPowerShell\v1.0\Modules\Defender ship as part of the Windows image. These files are catalog-signed. However, the manageability component of Windows Defender has a new out-of-band (OOB) update channel. This channel replaces the original files with updated versions that are signed by using a Microsoft certificate that the Windows operating system trusts. Because of this change, SFC flags the updated files as “Hashes for file member do not match.”

Future releases of Windows will use the updated files in the Windows image. After this change is implemented, SFC will no longer flag the files.