Client Security 13.00 went broken?

Couple of CS 13.00 users just told me, that they got error message from Windows saying that antivirus is disabled. I checked their eventvwr and found that two services were stopped 23.2.2018 at 14:27 and started 15 sec later:
F-Secure Ultralight Hoster
F-Secure Ultralight ORSP Client
Now I wonder, if F-secure released faulty antivir updates, which stopped these services, or do I have worm in my network? Anyone else still using 13.00, did you got similar user feedback?
Comments
-
It should not happen again and again, but even an Anti-Virus needs updates for the modules. 13.00 is already pretty old and several Updates have to be done. If too many at the same time WSC might get confused. After a Reboot ( not shutdown/restart!!!) everything should be fine.
From that point of view you can assume "any Antivirus is broken the day it goes RTM", because all need immediate updates.
0 Like -
hi,
we have received the message about disabled FS and Defender as well. It appeared on W10 computers using FSCSPr. v.13.10 after MS cumulative update.
Check following links it could be related:
https://support.microsoft.com/en-us/help/4074590/windows-10-update-kb4074590
0 Like -
Hello everybody,
Most likely, the root cause is the installation of core binaries update, which may turn the protection off for a few seconds. Such update was published in the channel recently.
You may check, that this is the reason in your case, by:
1. Checking the fsaua.log from c:\ProgramData\F-Secure\Logs\FSAUA\, which should contain F-Secure Ultralight Core Update installation.
2. Comparing the update installation time with Security Center informational events:
Updated F-Secure Client Security Premium 13.10 status successfully to SECURITY_PRODUCT_STATE_OFF.
Updated F-Secure Client Security Premium 13.10 status successfully to SECURITY_PRODUCT_STATE_ON.
in Windows Application events log.
Best regards,
Vad
1 1Like