MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
Endpoint Protection client is up and running in a healthy state. Platform version: 4.12.17007.18011 Engine version: 1.1.18700.4 Signature version: 1.353.1553.0 11500400-922337203685477580859Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24524360hv-neutron-8168S-1-5-1811/25/2021 3:05:22 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\360a82acd6fa2bbfbb9adff3c0a460d4ea15b0ba Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:06 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580858Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24522840hv-neutron-8168S-1-5-1811/25/2021 2:13:06 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\360a82acd6fa2bbfbb9adff3c0a460d4ea15b0ba Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:06 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580857Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24522840hv-neutron-8168S-1-5-1811/25/2021 2:13:06 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4fd19bf2474f6bbeb6aaf9c7045bdff2ff17f00d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:06 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580856Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24523320hv-neutron-8168S-1-5-1811/25/2021 2:13:06 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4fd19bf2474f6bbeb6aaf9c7045bdff2ff17f00d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:06 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580855Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24523320hv-neutron-8168S-1-5-1811/25/2021 2:13:06 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1efc83cf65a755a62be2737973004085b1f60569 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:05 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580854Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24523320hv-neutron-8168S-1-5-1811/25/2021 2:13:05 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\1efc83cf65a755a62be2737973004085b1f60569 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:05 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580853Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24523320hv-neutron-8168S-1-5-1811/25/2021 2:13:05 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0743c3bedc718ab91f5b4048aa109015d480c8ce Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:05 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580852Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24523464hv-neutron-8168S-1-5-1811/25/2021 2:13:05 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\0743c3bedc718ab91f5b4048aa109015d480c8ce Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:05 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580851Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24523464hv-neutron-8168S-1-5-1811/25/2021 2:13:05 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9d4a4ef40c882656ee74dc423da8a3cef85d963a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:04 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580850Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24523456hv-neutron-8168S-1-5-1811/25/2021 2:13:04 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\9d4a4ef40c882656ee74dc423da8a3cef85d963a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:04 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580849Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24523456hv-neutron-8168S-1-5-1811/25/2021 2:13:04 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\56167ccfbd6f33e1c08f5b632c64c8569f264760 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:03 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580848Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24523448hv-neutron-8168S-1-5-1811/25/2021 2:13:03 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\56167ccfbd6f33e1c08f5b632c64c8569f264760 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:03 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580847Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24523448hv-neutron-8168S-1-5-1811/25/2021 2:13:03 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\8b35ace8e07f743c5a2b6b166114c4c7c4de063b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:03 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580846Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24523448hv-neutron-8168S-1-5-1811/25/2021 2:13:03 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\8b35ace8e07f743c5a2b6b166114c4c7c4de063b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:03 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580845Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24523448hv-neutron-8168S-1-5-1811/25/2021 2:13:03 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7ac52d6180d278d554f41cdcf15414d9a7f824c5 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:02 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580844Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24522840hv-neutron-8168S-1-5-1811/25/2021 2:13:02 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.353.1553.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.18700.4 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7ac52d6180d278d554f41cdcf15414d9a7f824c5 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?11/?25/?2021 2:13:02 PM Persistence Limit Type: Duration Persistence Limit: 28800000020100400-922337203685477580843Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational24522840hv-neutron-8168S-1-5-1811/25/2021 2:13:02 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14600.4 Previous Engine Version: 2.1.14202.0 User: NT AUTHORITY\NETWORK SERVICE20020400-922337203685477580842Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational2216716WIN-5T344G8GM1HS-1-5-1811/25/2021 2:04:46 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 119.0.0.0 Previous Signature Version: 118.2.0.0 Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 2.1.14600.4 Previous Engine Version: 2.1.14202.020000400-922337203685477580841Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational2216716WIN-5T344G8GM1HS-1-5-1811/25/2021 2:04:46 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.353.1553.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.18700.4 Previous Engine Version: 1.1.14500.520000400-922337203685477580840Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22162756WIN-5T344G8GM1HS-1-5-1811/25/2021 2:04:39 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.353.1553.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.18700.4 Previous Engine Version: 1.1.14500.520000400-922337203685477580839Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22162756WIN-5T344G8GM1HS-1-5-1811/25/2021 2:04:39 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.18700.4 Previous Engine Version: 1.1.14500.5 User: NT AUTHORITY\NETWORK SERVICE20020400-922337203685477580838Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22162756WIN-5T344G8GM1HS-1-5-1811/25/2021 2:04:39 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x1 New value: 50070400-922337203685477580837Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational22162524WIN-5T344G8GM1HS-1-5-1811/25/2021 2:04:38 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM10020300-922337203685477580836Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21883896WIN-5T344G8GM1HS-1-5-181/19/2018 9:22:48 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM10000400-922337203685477580835Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21883896WIN-5T344G8GM1HS-1-5-181/19/2018 9:14:50 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help. 20010200-922337203685477580834Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882428WIN-5T344G8GM1HS-1-5-181/19/2018 9:04:58 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help. 20010200-922337203685477580833Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882428WIN-5T344G8GM1HS-1-5-181/19/2018 9:04:58 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiSpyware Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.520000400-922337203685477580832Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882592WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:54 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiVirus Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.520000400-922337203685477580831Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21882592WIN-5T344G8GM1HS-1-5-181/19/2018 8:54:54 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x17 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x1750070400-922337203685477580830Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883724WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:38 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\DaysUntilAggressiveCatchupQuickScan = 0x19 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\DaysUntilAggressiveCatchupQuickScan = 0x1E50070400-922337203685477580829Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883724WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:38 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\NewLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0 New value: Default\NewLocation = 50070400-922337203685477580828Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883012WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:34 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\ New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\50070400-922337203685477580827Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational28883012WIN-5T344G8GM1HS-1-5-181/19/2018 8:52:34 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM10020300-922337203685477580826Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17163872WIN-5T344G8GM1HS-1-5-181/19/2018 8:45:57 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 118.2.0.0 Update Source: Microsoft Malware Protection Center Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 2.1.14202.0 Error code: 0x80072ee2 Error description: The operation timed out 20010200-922337203685477580825Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:54 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.220000400-922337203685477580824Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162880WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.220000400-922337203685477580823Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162880WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2 User: NT AUTHORITY\NETWORK SERVICE20020400-922337203685477580822Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162880WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x150070400-922337203685477580821Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17162244WIN-5T344G8GM1HS-1-5-181/19/2018 8:35:21 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 20010200-922337203685477580820Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:34:10 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 20010200-922337203685477580819Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:34:10 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 20010200-922337203685477580818Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1716872WIN-5T344G8GM1HS-1-5-181/19/2018 8:34:10 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM10000400-922337203685477580817Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational17163872WIN-5T344G8GM1HS-1-5-181/19/2018 8:33:58 AMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.0 User: WIN-5T344G8GM1H\Administrator20020400-922337203685477580816Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21362364WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:48 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 118.2.0.0 Previous Signature Version: 116.1.0.0 Signature Type: Network Inspection System Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.020000400-922337203685477580815Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21362364WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:48 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://wdcp.microsoft.com/WdCpSrvc.asmx SOAP:https://wdcpalt.microsoft.com/WdCpSrvc.asmx REST:https://wdcp.microsoft.com/wdcp.svc/submitReport REST:https://wdcpalt.microsoft.com/wdcp.svc/submitReport BOND:https://wdcp.microsoft.com/wdcp.svc/bond/submitreport BOND:https://wdcpalt.microsoft.com/wdcp.svc/bond/submitreport 50070400-922337203685477580814Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365872WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x350070400-922337203685477580813Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365872WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiSpyware Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.020000400-922337203685477580812Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365004WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiVirus Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.020000400-922337203685477580811Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365004WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0 User: WIN-5T344G8GM1H\Administrator20020400-922337203685477580810Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational21365004WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:45 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\ManagedDefenderProductType = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ManagedDefenderProductType = 0x050070400-92233720368547758089Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational2136568WIN-5T344G8GM1HS-1-5-181/16/2018 5:35:36 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\InstallLocation = C:\Program Files\Windows Defender New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\50070400-92233720368547758088Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1242772WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:26 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.12706.0 Previous Engine Version: User: NT AUTHORITY\SYSTEM20020400-92233720368547758087Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1242044WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:26 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 116.1.0.0 Previous Signature Version: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: 2.1.12706.0 Previous Engine Version: 20000400-92233720368547758086Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1242044WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:26 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SpyNetReportingLocation = REST:https://spynet2.microsoft.com/spyNet.svc/submitReport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport 50070400-92233720368547758085Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrencyDss = 0xA New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrencyDss = 0xA50070400-92233720368547758084Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SSLOptions = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x150070400-92233720368547758083Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrency = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrency = 0x150070400-92233720368547758082Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:23 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: N/A\ProductType = New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ProductType = 0x250070400-92233720368547758081Microsoft-Windows-Windows Defender11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78Microsoft-Windows-Windows Defender/Operational1241992WIN-PD8DQPRRTAOS-1-5-181/16/2018 5:01:16 PMmicrosoft-windows-windows defender/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]