Fix Windows 10 Pro Defender Definitions That Will Not Update

Microsoft Defender Antivirus protects Windows 10 Pro against malware, ransomware and other unwanted software, but its protection depends on current security intelligence. When definition updates fail, Defender may display an old update date, show error codes such as 0x80070643, or report that the latest security intelligence is unavailable. The problem can affect a single computer or appear after a larger Windows Update failure.

The steps below focus on everyday Windows users in Australia, including people on home NBN connections, mobile broadband and workplace networks. They begin with simple checks and move towards repair commands that can restore Windows Update and Defender without deleting personal files.

Check the update status and basic connections

Open Windows Security from the Start menu, select Virus & threat protection, and look at the Security intelligence section. Note the date and version shown under the protection updates area. Select Check for updates and allow several minutes for the scan to finish. A slow NBN connection, a busy Wi-Fi network or a temporary Microsoft service issue can make the process appear stuck.

Restart the computer before trying again. This clears an update process that may still be running in the background. If you use a laptop in Melbourne, Brisbane or another city with crowded apartment Wi-Fi, connect by Ethernet if possible, or temporarily move closer to the router. For users relying on mobile broadband in regional Australia, check that the connection has not reached a data limit or switched to a restricted network profile.

Confirm that the date, time and time zone are correct. Right-click the clock, choose Adjust date/time, enable automatic time settings and select Sync now. Incorrect system time can interfere with certificate checks and Microsoft update servers. Also disconnect from a VPN or proxy for the test, unless it is required by your employer.

Windows 10 Pro support reached its standard end on 14 October 2025, so keeping the operating system fully serviced is increasingly important. Eligible devices may have access to Extended Security Updates, but Defender security intelligence updates and Windows Update behaviour can vary according to the device’s servicing status. Check Settings > Update & Security > Windows Update for pending updates before assuming that the antivirus engine itself is broken.

Install the security intelligence update manually

Windows Defender definitions are delivered as security intelligence updates, often listed in Windows Update history as Update for Microsoft Defender Antivirus antimalware platform or Security Intelligence Update for Microsoft Defender Antivirus. The update may also appear with a knowledge base reference such as KB2267602. A failed automatic installation does not always mean the Defender program is damaged.

In Windows Security, open Virus & threat protection, choose Protection updates, and select Check for updates. If that option fails, use Microsoft’s official Defender security intelligence download page from a browser. Choose the package that matches your system, usually the 64-bit version for a modern Windows 10 Pro computer. Save the file, close unnecessary programs and run it as an administrator.

To confirm whether Windows 10 is 64-bit, open Settings > System > About and check System type. Do not download random “Defender update” files from file-sharing sites or unofficial download pages. Security tools are a common target for bundled malware, and a fake update can create a more serious infection than the original definition problem.

After the manual installation, restart Windows and check the security intelligence date again. If the version changes but immediately becomes outdated, another service may be preventing scheduled updates. If the installer reports that the update is already installed, continue with Windows Update repair rather than repeatedly downloading the same package.

Repair Windows Update services and cache files

A damaged Windows Update cache can stop both cumulative updates and Defender definitions. Before changing services, close open applications and create a restore point by searching for Create a restore point in the Start menu. This gives you a recovery option if another configuration issue appears.

Open Command Prompt as administrator. Search for Command Prompt, right-click it and select Run as administrator, then enter these commands one at a time:

net stop wuauserv
net stop bits
net stop cryptsvc
net stop msiserver

These commands stop Windows Update, Background Intelligent Transfer Service, Cryptographic Services and the Windows Installer service. In File Explorer, open C:\Windows\SoftwareDistribution and delete the contents inside the folder, not the folder itself. Then open C:\Windows\System32\catroot2 and delete its contents. Windows will rebuild these folders when the services start again.

Return to the administrator Command Prompt and run:

net start wuauserv
net start bits
net start cryptsvc
net start msiserver

Restart the PC and try the Defender update again. If Windows says a service was not running, that is generally acceptable; the important point is that the services start successfully afterwards. Never delete the entire C:\Windows directory or unrelated system folders while clearing the update cache.

If you prefer a guided approach, run the built-in troubleshooter from Settings > Update & Security > Troubleshoot > Additional troubleshooters > Windows Update. It can identify disabled services, permissions problems and incorrect update settings without requiring command-line work.

Repair system files and check for software conflicts

Corrupted Windows components can cause Defender updates to fail even when the internet connection is working. In an administrator Command Prompt, run the following command and wait for it to reach 100 percent:

DISM /Online /Cleanup-Image /RestoreHealth

When DISM finishes, run:

sfc /scannow

DISM repairs the Windows component store, while System File Checker replaces damaged protected files. Restart the computer after both scans complete. If SFC reports that it could not repair some files, run DISM again after a restart and repeat the SFC scan. Avoid interrupting either process by shutting down the computer.

Third-party antivirus products, endpoint security suites and aggressive firewall tools can block Defender’s update service. If another antivirus program is installed, check whether it is set as the primary protection provider. Do not run two real-time antivirus products together. Temporarily pause a trusted security suite only for a controlled test, then turn it back on immediately. Uninstall unknown security software rather than simply disabling it.

Some system-cleaning utilities modify services, scheduled tasks or Windows registry settings. If you use extra Windows tools, review their recent changes and restore the default update settings. Microsoft Store applications and utilities can also behave differently after servicing changes, so use the site’s Windows 10 apps guidance when checking whether a recently installed program may be interfering with system components.

A clean boot can help isolate a conflict. Press Windows + R, enter msconfig, open the Services tab, select Hide all Microsoft services, then disable the remaining non-Microsoft services for testing. In Task Manager, disable unnecessary startup programs and restart. If Defender updates successfully, restore services in groups until the conflicting program is identified.

Reset Defender and review Windows settings

If the update engine works but Windows Security continues to show stale information, reset the Defender platform through PowerShell. Open Windows PowerShell as administrator and run:

Update-MpSignature

This tells Defender to request the latest signatures directly. You can check the current status with:

Get-MpComputerStatus

Look for AntivirusEnabled, RealTimeProtectionEnabled and recent signature dates. If real-time protection is disabled by organisation policy, a work or school administrator may control the setting. Do not change group policies on a managed computer without permission.

Review Settings > Update & Security > Windows Update > Advanced options. Make sure updates have not been paused and that active hours are configured sensibly. On metered connections, Windows may delay downloads. Open Settings > Network & Internet > Wi-Fi, select the connected network and turn off Set as metered connection temporarily if your data plan allows it. This matters for households using fixed wireless or mobile broadband outside major metropolitan areas.

Windows Security notifications can be misleading when the display layer is affected by a broader Windows issue. For example, a separate screen-setting problem may make security alerts harder to read or interact with. If display controls are unavailable as well, follow this Night light guide separately rather than changing Defender registry entries.

If definitions still refuse to update, restart into Safe Mode with Networking and test Windows Update there, or perform an in-place repair upgrade using official Windows 10 installation media. Select the option to keep personal files and applications. Back up important documents first, especially before repairing a work PC or a machine used for tax records, family photos or business files.

For recurring update failures, record the exact error code, the last successful definition date and the results of DISM and SFC. This information helps Microsoft support or a local technician diagnose the cause faster. A reputable computer shop in Sydney, Perth or Adelaide can also check for malware, failing storage and service permission problems when software repairs do not hold.

Run Windows Security’s Quick scan after the update succeeds, then schedule regular checks and leave real-time protection enabled. If you download a diagnostic or maintenance utility, review its publisher, privacy policy and removal process first; independent technical resources such as PC maintenance advice can be useful when comparing general system-care practices, but security software should always come from Microsoft or a clearly trusted vendor.

Work through the checks in order, beginning with the connection, time settings and pending Windows updates. Then repair the update cache, scan system files and test for third-party conflicts. Once Defender shows a current security intelligence version, keep Windows restarted regularly and investigate any future failure by recording its code instead of repeatedly installing unverified update files.