For more information, see the following:Ĭategory: Category description, for example, any threat or malware type.Īllow: The resource was allowed to execute/exist Message: The antimalware platform performed an action to protect your system from malware or other potentially unwanted software.ĭescription: Microsoft Defender Antivirus has taken action to protect this machine from malware or other potentially unwanted software. Symbolic name: MALWAREPROTECTION_MALWARE_ACTION_TAKEN UAC.Įngine Version: Antimalware Engine version Primarily used to protect scripts (PowerShell, VBS), though it can be invoked by third parties as well. This includes malware detected by the boot sequence.Īntimalware Scan Interface (AMSI). IEPROTECT: IE - IExtensionValidation this protects against malicious webpage controlsĮarly Launch Antimalware (ELAM). IOAV: IE Downloads and Outlook Express Attachments initiated Examples: Heuristics, Generic, Concrete, or Dynamic signatureĭetection Source: Detection source for example: Examples: Unknown, Local computer, Network share, Internet, Incoming traffic, or Outgoing trafficĭetection Type: Detection type. Examples: Any threat or malware type.ĭetection Origin: Detection origin. Examples: Low, Moderate, High, or SevereĬategory: Category description. Message: The antimalware engine found malware or other potentially unwanted software.ĭescription: For more information, see the following: Symbolic name: MALWAREPROTECTION_MALWARE_DETECTED Contact (/microsoft-365/admin/get-help-support). If it fails in the same way, go to the (), enter the error number in the Search box to look for the error code. To troubleshoot this event: - Run the scan again. This event record includes the scan ID, type of scan (Microsoft Defender Antivirus, antispyware, antimalware), scan parameters, the user that started the scan, the error code, and a description of the error.

The scan might fail due to a client-side issue. The antivirus client encountered an error, and the current scan has stopped.

Standard HRESULT values.Įrror Description: Error description. Result code associated with threat status. Examples: Full scan, Quick scan, or Custom scanĮrror Code: Error code. Examples: Antivirus, Antispyware, or Antimalware Symbolic name: MALWAREPROTECTION_SCAN_FAILED

Event id 2001 microsoft antimalware