The offline scan is an important feature but very badly designed to report the scan result. I've run an offline scan but there is no report of the result on reboot - a null report should be given even if nothing is found. There is nothing informative in Event Viewer and the Threat History just reports a Full Scan I did 11 days ago and not the current offline scan. Did MS contract this feature to a summer student?
Attachment 235276
I can run offline scans without a problem, but how do you know if any malware was found? There is nothing to that effect in the event logs, nor in the Windows Defender UI. Also, yesterday when I ran an offline scan, a log file was created (MPLog-20201228-135822.log), but just now I ran another offline scan,and there is no MPLog-YYYYMMDD-HHMMSS.log file for it at all. I am confused. Edit: The new scan's log entries were appended to the existing log (i.e. no new log file was created, which is what I expected. My mistake!).
The scan in the log that was created yesterday ends as follows, which doesn't tell me anything about detections (unless "Exit Code = 0x0" means it's all clear):
Code:2020-12-28T22:00:34.798Z [Cloud] Engine is requesting config to do cloud query [regular network]. 2020-12-28T22:00:34.814Z Service stop requested (ServiceError: 0x0). Calling CleanupMpService ... 2020-12-28T22:00:34.892Z Unloaded module#0 MpComServer. Microsoft Antimalware (F7F4CD20-7371-4319-B1DB-6FCFC68573EC) Log Stopped On 12-28-2020 14:00:34 (Exit Code = 0x0) ************************************************************
Quote
