Windows Defender Offline Scan results?

Page 1 of 2 12 LastLast

  1. Posts : 742
    Win10
       #1

    Windows Defender Offline Scan results?


    Just did a Windows Defender Offline Scan and wondering what the results are?
    All it showed during the scan was how many files are being scanned and the percentage completed.
    That is all.

    Even if no threats were detected, at least it should notify that no threats were detected during the Offline Scan.
      My Computer


  2. Posts : 61,517
    64-bit Windows 11 Pro for Workstations
       #2

    Hello,

    Windows Defender event logs are saved to the file below. You can open it to view the logs in Event Viewer.

    %windir%\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx

    Windows Defender Offline Scan in Windows 10
      My Computers


  3. Posts : 7,086
    Windows 10 Pro 64 bit
       #3

    Brink said:
    Hello,

    Windows Defender event logs are saved to the file below. You can open it to view the logs in Event Viewer.

    %windir%\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx

    Windows Defender Offline Scan in Windows 10
    Not exactly user friendly is it?
      My Computers


  4. Posts : 61,517
    64-bit Windows 11 Pro for Workstations
       #4

    Steve C said:
    Not exactly user friendly is it?

    No. It would be nice to have a link in the scan results window.
      My Computers


  5. Posts : 742
    Win10
    Thread Starter
       #5

    Its not giving me the scan results. Only when I started and ended the scan.

    According to this knowledge base here the results should be under the Threat History or Protection History (v1903).
    https://support.microsoft.com/en-us/...-protect-my-pc
      My Computer


  6. Posts : 61,517
    64-bit Windows 11 Pro for Workstations
       #6

    I noticed that it takes a few moments after running the command below for the events to actually show up in the middle pane of Event Viewer.

    If anything was found, it should be included in the event.

    %windir%\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx
      My Computers


  7. Posts : 742
    Win10
    Thread Starter
       #7

    I found this in the event viewer. What do you think?
    Maybe it detected changes to Windows Defender to run the Offline scan, but this was actually done by me and not from malware.

    Windows Defender Antivirus Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: N/A\Scan\OfflineScanRun = New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\OfflineScanRun = 0x0
      My Computer


  8. Posts : 61,517
    64-bit Windows 11 Pro for Workstations
       #8

    @win10freak,

    This is normal to have this registry value after running an offline scan.

    That message in the Event Viewer log is just letting you know of this registry change.

    Windows Defender Offline Scan results?-scan.png
      My Computers


  9. Posts : 61,517
    64-bit Windows 11 Pro for Workstations
       #9

    Ok. I found the log file for a Windows Defender Offline Scan.

    It's a MPLog-YYYYMMDD-HHMMSS.log file located in the C:\Windows\Microsoft Antimalware\Support folder.

    You will notice D:\ProgramData\Microsoft\Windows Defender\Offline Scanner towards the top in the opened log file.

    Windows Defender Offline Scan results?-windows_defender_offline_scan_log_file.png
    Windows Defender Offline Scan results?-windows_defender_offline_scan_log_file-2.png
      My Computers


  10. Posts : 742
    Win10
    Thread Starter
       #10

    Thank you for the details. But still, no scan results from the Offline Scanner. Even if the Offline scan found no malware, it should log it as No Threats Found just the way the Online scanner does.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 20:50.
Find Us




Windows 10 Forums