Windows Defender "Scan Type Index"


  1. Posts : 4
    windows 10 pro
       #1

    Windows Defender "Scan Type Index"


    I found out how to see the event logs for Windows Defender scans from a thread on eightforums ("Windows Defender - where are the Scan Results?"). I just ran a full scan, but Windows Defender apparently ran a quick scan afterwards, so there is no confirmation on the WD user interface that the full scan completed. So following the advice in that other thread, I looked at the WD log in the Event Viewer. I see in the Operational listing two events with Event ID 1000, which seems to correspond to a scan starting, and two with Event ID 1001, which corresponds to a scan finishing (see below). The two 1000 events and the two 1001 events differ from each other in the "Scan Type Index" visible in the Details view of each event, which is "1" for one pair of 1000 and 1001 and "2" for the other. The times are consistent with the 1000/1001 pair for Scan Type Index 2 being the full scan and the pair with Scan Type Index 1 being the subsequent quick scan. Am I correct that Scan Type Index 1 is a quick scan and Scan Type Index 2 is a full scan? Is there some place where the various event type codes, etc are described?

    To butter you up a little bit, but truthfully, I have found tenforums to be indispensable in solving various problems I've had since upgrading to Windows 10. Much better than the Microsoft forums. Thank you.
    Attached Thumbnails Attached Thumbnails Windows Defender "Scan Type Index"-2016_01_05_14_38_021.png  
    Last edited by jandlightning; 05 Jan 2016 at 13:24.
      My Computer


  2. Posts : 4
    windows 10 pro
    Thread Starter
       #2

    jandlightning said:
    I found out how to see the event logs for Windows Defender scans from a thread on eightforums ("Windows Defender - where are the Scan Results?"). I just ran a full scan, but Windows Defender apparently ran a quick scan afterwards, so there is no confirmation on the WD user interface that the full scan completed. So following the advice in that other thread, I looked at the WD log in the Event Viewer. I see in the Operational listing two events with Event ID 1000, which seems to correspond to a scan starting, and two with Event ID 1001, which corresponds to a scan finishing (see below). The two 1000 events and the two 1001 events differ from each other in the "Scan Type Index" visible in the Details view of each event, which is "1" for one pair of 1000 and 1001 and "2" for the other. The times are consistent with the 1000/1001 pair for Scan Type Index 2 being the full scan and the pair with Scan Type Index 1 being the subsequent quick scan. Am I correct that Scan Type Index 1 is a quick scan and Scan Type Index 2 is a full scan? Is there some place where the various event type codes, etc are described?

    To butter you up a little bit, but truthfully, I have found tenforums to be indispensable in solving various problems I've had since upgrading to Windows 10. Much better than the Microsoft forums. Thank you.
    I opened Event Viewer again, and this time I see that the type of scan is shown in the General window. For some reason I didn't see that before. So...never mind, and my apologies if I wasted anyone's time.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 23:53.
Find Us




Windows 10 Forums