Event ID: 2001

Applies To: Forefront Endpoint Protection

Event ID 2001 — Forefront Endpoint Protection Client

This event is logged in the System log.

Details

Product

Microsoft Malware Protection

ID

2001

Source

Microsoft Antimalware

Version

3.0

Symbolic Name

MALWAREPROTECTION_SIGNATURE_UPDATE_FAILED

Message

Forefront Endpoint Protection client has encountered an error trying to update signatures.

  • New Signature Version: <New version number>

  • Previous Signature Version: <Previous version number>

  • Update Source: Signature Update Folder, Internal Definition Update Server, Microsoft Update Server, File share, Microsoft Malware Protection Center

  • Update Stage: Search, Download, Install

  • Source Path: <File share name for UNC, server name for WSUS/MU/ADL>

  • Signature Type: Antivirus, Antispyware, Software Restriction, Antimalware, Network Inspection System

  • Update Type: Full, Delta

  • User: <Domain>\<User>

  • Current Engine Version: <Current engine version>

  • Previous Engine Version: <Previous engine version>

  • Error code: <Error code>

  • Error description: <Error description>

Explanation

This error occurs if there is a problem while trying to update definitions.

User Action

If you are having problems updating definitions, the following steps can help:

  1. Ensure your configuration for definition updates is correct. For more information, see Configuring definition updates (https://go.microsoft.com/fwlink/?LinkId=214996).

  2. Check your WSUS configuration settings. For more information, see Updates and Windows Server Update Services Definition Updates (https://go.microsoft.com/fwlink/?LinkId=214315).

  3. Try to update the definitions manually by downloading the full definitions files. To download the definitions, see the alternative download location (https://go.microsoft.com/fwlink/?LinkId=214316).

  4. For more information about this error, review the entries in the %Windir%\WindowsUpdate.log log file.