Is it okay to clear the MS Defender Logs?

Page 2 of 2 FirstFirst 12

  1. Posts : 4,869
    Windows 10 preview 64-bit Home
       #11

    Nope, not in Win 10 either

    Is it okay to clear the MS Defender Logs?-2022-05-20-15_41_31-windows-security.png
      My Computers


  2. Posts : 64
    Windows 10
    Thread Starter
       #12

    WXC said:
    Just curious, so I searched for C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service, and no items matched my search on my old PC.

    Isn't that strange?

    I do use Windows security, although it has never detected a threat, I'm surprised that I don't have this entry.


    ...I guess the old adage 'No news is good news' applies for me here.
    Interesting... I wonder if it's the same on a fresh Windows 10 VM...

    - - - Updated - - -

    Fabler2 said:
    Nope, not in Win 10 either

    Is it okay to clear the MS Defender Logs?-2022-05-20-15_41_31-windows-security.png
    That's weird...
      My Computer


  3. Posts : 6,990
    22H2 64 Bit Pro
       #13
      My Computer


  4. Posts : 4,869
    Windows 10 preview 64-bit Home
       #14

    [QUOTE=Callender;2425918]You have to unhide it.


    I always run with 'show hidden files....'.
    I've even turned off Tamper protection lol. As long as it works for the OP then that's all that counts. I don't really care if it doesn't work on my laptops.
      My Computers


  5. Posts : 6,990
    22H2 64 Bit Pro
       #15

    Those logs can be cleared if using winapp2.ini and a system cleaner that supports it.

    [Windows Defender *]
    LangSecRef=3024
    Detect=HKLM\Software\Microsoft\Windows Defender
    FileKey1=%CommonAppData%\Microsoft\Windows Defender\Network Inspection System\Support|*.txt;NisLog.txt.bak
    FileKey2=%CommonAppData%\Microsoft\Windows Defender\Scans\BackupStore|*.*|RECURSE
    FileKey3=%CommonAppData%\Microsoft\Windows Defender\Scans\History\CacheManager|*.*|RECURSE
    FileKey4=%CommonAppData%\Microsoft\Windows Defender\Scans\History\Service|*.log
    FileKey5=%CommonAppData%\Microsoft\Windows Defender\Scans\History\Store|*.*
    FileKey6=%CommonAppData%\Microsoft\Windows Defender\Scans\MetaStore|*.*|RECURSE
    FileKey7=%CommonAppData%\Microsoft\Windows Defender\Scans\RtSigs\Data|*.*|RECURSE
    FileKey8=%CommonAppData%\Microsoft\Windows Defender\Support|*.*|RECURSE

    Maybe you cleaned logs without knowing?

    Anyway you're not supposed to get access:

    Is it okay to clear the MS Defender Logs?-c__programdata_microsoft_windows-defender.png

    I just use third party tools to bypass permissions without changing ownership.


    Is it okay to clear the MS Defender Logs?-q-dir-9.41-admin.png

    Is it okay to clear the MS Defender Logs?-q-dir-9.41-admin-3.png
    Just an FYI for those who can't see it. (I mean can't see it when it is present)

    If not present - no worries.
      My Computer


  6. Posts : 6,990
    22H2 64 Bit Pro
       #16

    Also I'm guessing that "Detection History" might not exist in a VM until there has actually been something to detect.

    So I suppose download the Eicar file and if detected check again for the folder and contents.
      My Computer


  7. WXC
    Posts : 13,170
    Windows 10 Pro 64-bit 22H2 19045.4046
       #17

    Callender said:

    Fabler2 said:

    I always run with 'show hidden files....'.
    I've even turned off Tamper protection lol. As long as it works for the OP then that's all that counts. I don't really care if it doesn't work on my laptops.

    Thank you, guys.

    Curiosity satisfied, I found it. But I'm not going to clear, as I don't think they're bothering anything.


    Much appreciated.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 04:12.
Find Us




Windows 10 Forums