WinDefend malware warnings in Event Viewer

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

There are WinDefend warnings in my Event Viewer stating that RTP has detected
potential malware. The are no Windows Defender warnings or baloon pop ups to
the desktop or system tray about this potential malware. There ARE
information pop ups that a change has been made to certain drivers, etc. I
know the cause of these warnings: a scan by my installed Dell Support
Computer Checkup on my Dell Dimension 3000. Dell's scan must be quite
intrusive to generate these warnings.

A scan by my installed AOL Computer Checkup does not generate any Event
Viewer warnings or baloon popups from the system tray.
 
Items not yet classified--i.e. 'unknown' - will by default generate log
messages, but no alerts.

If you want to see alerts--and these are potential--not known bad or known
good--just unknown--you need to join Spynet as an advanced member, and check
the box near the bottom of the general settings to enable display of alerts
for "not yet classified" objects.
 
I just made that change yesterday. Thanks for the suggestion. What I would
really like the most is an icon in the system tray while WinDefend is running
a scheduled scan. LOL I lost track of the time -clicked on the Defender
icon on my idle PC to tweak a setting - and froze my PC! Defender was
already scanning and I had forgotten. Total lockdown. Couldn't even access
Task Manager. Such is life!
--
Old Rebel: Too Old to Rebel; Too Young to just take it!


Bill Sanderson said:
Items not yet classified--i.e. 'unknown' - will by default generate log
messages, but no alerts.

If you want to see alerts--and these are potential--not known bad or known
good--just unknown--you need to join Spynet as an advanced member, and check
the box near the bottom of the general settings to enable display of alerts
for "not yet classified" objects.

--
Click to expand...
 
That incident may explain some of the lockup messages I've seen in these
groups.

I ran a full scan on a machine today from the command prompt--mpcmdrun scan
<enter>

I was able to open or close the UI (hit the Windows Defender icon in Start)
and see the files being scanned--no freeze.

--

Old Rebel said:
I just made that change yesterday. Thanks for the suggestion. What I would
really like the most is an icon in the system tray while WinDefend is
running
a scheduled scan. LOL I lost track of the time -clicked on the Defender
icon on my idle PC to tweak a setting - and froze my PC! Defender was
already scanning and I had forgotten. Total lockdown. Couldn't even
access
Task Manager. Such is life!
Click to expand...
 
There may be other variables. I can't remember now, but I may have had AOL
9.0 launched. Between that and WinDefend, the strain would be significant. I
had a incident where I started a quick scan with WinDefend, and a scheduled
Spysweeper scan started while it was in progress. (Very Absent Minded!) Both
scans ran to completion without a freeze up. But not only was I offline, but
AOL 9.0 was not loaded. Probably each incident has different factors
causing the lockdown.
 
I've seen one report that when a scheduled scan is missed, it happens on the
next system start--and that scan, presumably initiated by the Windows
Defender Service--has an icon.

I'd like to see this myself, and also try to figure out if there's a way to
get that icon with scheduled scans.

--
 
Back
Top