Windows 10: HKLM Antivirus Configuration after offline scan

After an offline scan, I saw this message and many others in the Event Viewer's Operational logs, does this mean anything bad?Microsoft Defender Antivirus Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\ProductAppDataPath = C:\ProgramData\Microsoft\Windows Defender New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ProductApp

:)

 

Offline scan done, event log shows a problem?

Microsoft Defender Antivirus downloaded and configured Microsoft Defender Antivirus (offline scan) to run on the next reboot.

---------------------------------------------------------------

Microsoft Defender Antivirus Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware.

Old value: Default\IsServiceRunning = 0x0

New value: HKLM\SOFTWARE\Microsoft\Windows Defender\IsServiceRunning = 0x1

----------------------------------------------------------------

Although the offline scan ran, could not see results in event viewer except above. Any ideas, do I have malware?

 

Windows Defender Offline Scan

Hello,

So I was doing a windows offline scan and it restarted and ran but before it completed it restarted again and did not show me any results. I looked at the event viewer logs and it showed these logs:

Windows Defender Antivirus downloaded and configured Windows Defender Offline to run on the next reboot. Event ID: 2030

At the same time and same second this Event happened:

Windows Defender Antivirus Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware.

Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\OfflineScanRun = 0x1

New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\OfflineScanRun = 0x0

Event ID: 5007

I do not see the offline scan in any scan history and I do not see the results in any logs that I know of (granted I do not know much about windows defender logs)

Does this mean the scan was deactivated before it started to run which caused it to not complete?

I do not use any third party apps that I can think of.

Thanks for taking the time to read this.

 

Windows defenser offline scan not being logged

Hi there,

Got this in the event log:

Event 2030: Windows Defender Antivirus downloaded and configured Windows Defender Offline to run on the next reboot.

This was immediately followed by the following:

Windows Defender Antivirus Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware.

Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\OfflineScanRun= 0x1

New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\OfflineScanRun = 0x0

Is this normal? Ive recently just reinstalled windows 10, and I ran the offline scan out of defender from curiosity. When I try this with quick scan it actually logs the event, but oddly its not the same for offline. I’m new to defender and i’m curious
if this is a normal thing or if I should be concerned. I had mcafee prior to this, but its long gone and uninstalled. The UI of the offline scanner itself shows up, and scans the system, but it doesn’t log it. Defender is on it latest update as well. Any help?