MpCmdRun.exe fails with error 0x80070005

[JørgenJohanson]

Hi,


In the process of cleaning up after a false detection case I get a 0x80070005 error when running MpCmdRun.exe.


Background details here: Windows Defender reports a Trojan for pure C project - Developer Community


In my "Submission details, Analyst comments" for the submission on the Windows Defender file submission site, I am instructed to run:

c:\Program Files\Windows Defender>MpCmdRun.exe -removedefinitions -dynamicsignatures​

Service Version: 4.18.2004.6​

Engine Version: 1.1.17100.2​

AntiSpyware Signature Version: 1.317.113.0​

AntiVirus Signature Version: 1.317.113.0​

Starting Dynamic Signature removal.Failed! Error 0x80070005​

Service Version: 4.18.2004.6​

Engine Version: 1.1.17100.2​

AntiSpyware Signature Version: 1.317.113.0​

AntiVirus Signature Version: 1.317.113.0​

CmdTool: Failed with hr = 0x80070005. Check C:\Users\<user>\AppData\Local\Temp\MpCmdRun.log for more information​

As can be seen, I end up with a 0x80070005 error twice. The log file MpCmdRun.log looks like this:


-------------------------------------------------------------------------------------

MpCmdRun: Command Line: MpCmdRun.exe -removedefinitions -dynamicsignatures

Start Time: ‎tor. ‎mai ‎28 ‎2020 13:15:37



MpEnsureProcessMitigationPolicy: hr = 0x1

Start: MpRemoveDefinitions(0)

ERROR: MpRollbackSignature failed with hr=80070005

MpCmdRun: End Time: ‎tor. ‎mai ‎28 ‎2020 13:15:37

-------------------------------------------------------------------------------------



How can I "... clear cached detection and obtain the latest malware definitions ..." (I already have the latest definitions I think)?


Regards
J

Continue reading...