v2.5.3 WDU.cmd

SETLOCAL EnableDelayedExpansion
::Allow only WDU task to run this file::
whoami /user /nh | find /i "S-1-5-18" || exit
cd /d "%~dp0"
::Wait 5 minutes to prevent resource hogging after reboot with missed update::
timeout /t 300
::If WUMT or WuMgr are running, cancel Defender update and exit. If not, continue::
tasklist | findstr /irc:"wumt_x.*exe"
if %errorlevel% equ 0 goto skipdefenderupdate
tasklist | findstr "wumgr.exe"
if %errorlevel% equ 0 goto skipdefenderupdate
::If Windows Defender is running, update it. If not, cancel Defender update and exit::
sc query | find /i "windefend"
if %errorlevel% equ 1 goto skipdefenderupdate
::Enable Windows Update service and update Defender, then disable Update Service::
if not exist wub.exe-backup (wub.exe /e)
timeout /t 10
"%ProgramFiles%\Windows Defender\MpCmdRun.exe" -SignatureUpdate
if not exist wub.exe-backup (wub.exe /d /p)
goto defenderupdated
:skipdefenderupdate
set errorlevel=1
:defenderupdated
exit /b %errorlevel%