Just did a Windows Defender Offline Scan and wondering what the results are?
All it showed during the scan was how many files are being scanned and the percentage completed.
That is all.
Even if no threats were detected, at least it should notify that no threats were detected during the Offline Scan.
Hello,
Windows Defender event logs are saved to the file below. You can open it to view the logs in Event Viewer.
%windir%\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx
Windows Defender Offline Scan in Windows 10
Not exactly user friendly is it?Hello,
Windows Defender event logs are saved to the file below. You can open it to view the logs in Event Viewer.
%windir%\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx
Windows Defender Offline Scan in Windows 10
Its not giving me the scan results. Only when I started and ended the scan.
According to this knowledge base here the results should be under the Threat History or Protection History (v1903).
https://support.microsoft.com/en-us/...-protect-my-pc
I noticed that it takes a few moments after running the command below for the events to actually show up in the middle pane of Event Viewer.
If anything was found, it should be included in the event.
%windir%\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx
I found this in the event viewer. What do you think?
Maybe it detected changes to Windows Defender to run the Offline scan, but this was actually done by me and not from malware.
Windows Defender Antivirus Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: N/A\Scan\OfflineScanRun = New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\OfflineScanRun = 0x0
@win10freak,
This is normal to have this registry value after running an offline scan.
That message in the Event Viewer log is just letting you know of this registry change.
Ok. I found the log file for a Windows Defender Offline Scan.
It's a MPLog-YYYYMMDD-HHMMSS.log file located in the C:\Windows\Microsoft Antimalware\Support folder.
You will notice D:\ProgramData\Microsoft\Windows Defender\Offline Scanner towards the top in the opened log file.
Thank you for the details. But still, no scan results from the Offline Scanner. Even if the Offline scan found no malware, it should log it as No Threats Found just the way the Online scanner does.
Quote
