New
#1
Windows Defender "Scan Type Index"
I found out how to see the event logs for Windows Defender scans from a thread on eightforums ("Windows Defender - where are the Scan Results?"). I just ran a full scan, but Windows Defender apparently ran a quick scan afterwards, so there is no confirmation on the WD user interface that the full scan completed. So following the advice in that other thread, I looked at the WD log in the Event Viewer. I see in the Operational listing two events with Event ID 1000, which seems to correspond to a scan starting, and two with Event ID 1001, which corresponds to a scan finishing (see below). The two 1000 events and the two 1001 events differ from each other in the "Scan Type Index" visible in the Details view of each event, which is "1" for one pair of 1000 and 1001 and "2" for the other. The times are consistent with the 1000/1001 pair for Scan Type Index 2 being the full scan and the pair with Scan Type Index 1 being the subsequent quick scan. Am I correct that Scan Type Index 1 is a quick scan and Scan Type Index 2 is a full scan? Is there some place where the various event type codes, etc are described?
To butter you up a little bit, but truthfully, I have found tenforums to be indispensable in solving various problems I've had since upgrading to Windows 10. Much better than the Microsoft forums. Thank you.
Last edited by jandlightning; 05 Jan 2016 at 13:24.