Share via

How to tell if Offline defender scan ran successfully?

Anonymous
2019-12-05T00:30:42+00:00

I tried to run the "offline scan".  It rebooted, looks like it did something, and then looks like it booted to normal windows.

According to what I could find on the web, it should have put a log file in "C:\windows\Microsoft\Antimalware\Support" folder, but that folder doesn't exist.  

Is the log somewhere else?  Did the scan actually run?  Was it successful, or did some malware prevent it from running?

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

24 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2019-12-05T16:03:57+00:00

    A possible related problem is that I can't open the "Protection history" under Settings "Virus & threat protection".  I'm wondering if the offline scan is trying to write something there and can't.

    After I start the offline scan, and the reboot happens, I see what looks like a dos window flash, and then I see a little dialog with a green progress bar, and then the PC restarts.

    That all takes about 2 minutes or less.  I thought the scan was supposed to be about 15 minutes, but that problem depends on the CPU, disk, etc.

    But so far I haven't seen an indication that the scan actually ran.

    … time passes ...

    I watched a video of what appears to be an older version of the OS running the offline scan.  I saw the green progress bar dialog, but THEN there was a tabbed dialog that showed up and could show scan progress.  That didn't happen for me.  So I think the offline scan is not able to start.

    Now what?

    … time passes ...

    Tried it on my wife's PC and it worked the same as mine, but when I looked in Event Viewer, there was not even the Saved Logs node which I DO have.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2019-12-05T12:13:58+00:00

    You didn't answer my question about the file location.  Do you know if there should be such a folder?  It doesn't exist.

    Also, I think for a while, if I click on the protection history, the Defender dialog crashes.  It works fine on my wife's machine.

    … time passes ...

    Ok, I was able to find the History.log file in "C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service".  However, it is empty even though quick scans and full scans have been run in the past.

    My wife's machine runs the offline scan fine and the file contains information.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  3. Igor Leyko 111K Reputation points Independent Advisor
    2019-12-05T14:55:18+00:00

    Was this answer helpful?

    0 comments
  4. Igor Leyko 111K Reputation points Independent Advisor
    2019-12-05T14:48:42+00:00

    Hi Mark,

    Any results of off-line operations are stored in system journal (Event Viewer).

    Was this answer helpful?

    0 comments
  5. Paulo GM 66,370 Reputation points Independent Advisor
    2019-12-05T00:46:26+00:00

    Hi,

    Thank you for posting your query. I am a Community adviser. Let me help you with the best that I can.

    You can easily check if the scan was successful by going in to Settings> Update & Security> Windows Security> Virus threat & protection. You can see when was the last scan, threats found, how long was the scan and how many files were scanned. You can also view below if your security intelligence is up to date for virus protection.

    I hope this helps resolve your concern! Please let me know if you have further concerns.

    Sincerely,

    Paulo M.

    Expert

    Was this answer helpful?

    0 comments