Windows 10: "LastMAPSFailureTimeString" Event in Windows Defender Logs, Is This a Cause for Concern?

I checked my Windows Defender logs in Event Viewer > Applications and Services > Microsoft > Windows > Windows Defender > Operational, and saw something I haven't really seen before, the event said;"Old Value: N/A\SpyNet\LastMAPSFailureTimeString=""New Value: HKLM\Software\Microsoft\WindowsDefender\SpyNet\LastMAPSFailureTimeString= time"the time it displayed does not have any corresponding events in System, Security, or Application logs, nor does it have anything in the Windows Defender log itself. I asked my friend to check his log, and he does have this identical event, but

:)

 

New Event Details in "Windows Defender > Operational" Log (Event Viewer)

Hi JJJ Ham,

The events you've observed in the Windows Defender Operational log are likely part of the normal initialization and updating processes of Windows Defender, now known as Microsoft Defender Antivirus. Here's an explanation of each event:

1. Event on November 29th - "Initialize Misc Config Library" to "PostPlatformUpdate": This event corresponds with a Windows Defender update. The change from the "Old value" to the "New value" suggests a transition in the initialization stage of Defender components. "Initialize Misc Config Library" likely refers to setting up various configuration settings, while "PostPlatformUpdate" indicates that this stage is completed following an update to the Defender platform.
   
2. Subsequent Events - "PostPlatformUpdate" to "Service Started Successfully": These events show a sequential process in which Windows Defender progresses through different initialization stages. "Loading Engine" likely refers to the loading of the core antivirus engine, a critical part of Defender's functionality. The final message, "Service Started Successfully," confirms that the Defender service has successfully started and is operational.
   

These types of events are normal for the operation and updating of Microsoft Defender Antivirus. The reason you started noticing these events from the 29th could be due to a particular update or a change in the logging behavior of Windows Defender. It's common for software updates to adjust or enhance how they log events.

The absence of these events on your Windows 11 system might be due to different logging methods in Windows 10 and Windows 11, or it could be because Windows Defender operates differently when another antivirus software is in use. The registry keys related to these logs might also vary or be used differently in Windows 11.

In conclusion, the events you've noticed are a standard part of Windows Defender's operation and not a cause for concern, especially since they align with an update process. The variation in logs between Windows 10 and Windows 11 could be attributed to differences in the operating system versions or configurations.

Regards，

Manson |Microsoft Community Support Specialist

 

Windows Defender notification of malware detection

Hello,

Thank you for keeping us posted and we appreciate your continued patience on this issue.

At this point, I suggest you to update the Windows Defender program and check if it helps.

To check for new Windows Defender definitions manually:

• Open Windows Defender.
• Click the arrow next to the Help button, and then click Check for updates. If you are prompted for an administrator password or confirmation, type the password or provide confirmation.

Also, check if the detection is of the same malware file or not. Again, see if it is any specific program or a file you try to access which triggers the detection.

Additionally, view the log in Event Viewer to check if the malware is removed every time it is prompted.

To open the Event Viewer. To do so, follow the below steps.

• Go to the Control Panel and choose to click on the
  Administrative Tools icon.
• The above action will open up a new window of the Administrative Tools where you will see the
  Event Viewer.
  

You can view Windows Defender "Operational" events in Event Viewer under Applications and Services Logs -> Microsoft -> Windows -> Windows Defender.

Kindly keep us posted, for us to be able to assist you further.

Thank you.

 

Windows Defender Fails Malware Test

hmm i've been running windows defender for a few months now, but no problems yet. most likely because i'm careful online (ff, no html emails, only trusted sites, etc). windows defender does have some annoying things with it tho (like not telling you what spyware/ problem it found, but logging it in event viewer with some cryptic id or sommat). i need to find a new proggie soon.