Windows 10: Windows Defender get-mpthreatdetection CleaningActionID Codes

Jurijs V. · Aug 13, 2023

Good day,Where can I get codes' translation of CleaningActionID of Get-MPThreatDetection command output Windows Defender?It has various codes from 1-9 assume. QUOTEActionSuccess : TrueAdditionalActionsBitMask : 0CleaningActionID : 2CurrentThreatExecutionStatusID : 0DetectionSourceTypeID &

:)

Paul Black · Aug 13, 2023

Windows Defender Problem

Hello @del 80,,

To check the current status of Microsoft Defender Antivirus, Copy & Paste the following command into a CMD Prompt and press Enter.

Code:

PowerShell "Get-MpComputerStatus | Format-List *"
Click to expand...

To see if Microsoft Defender Antivirus is actually working, Copy & Paste the following commands into a CMD Prompt and press Enter.

The FIRST one will show a history of threats, and the SECOND one will list the active and past malware detections.

Code:

PowerShell "Get-MpThreat | Format-List *"
Click to expand...

Code:

PowerShell "Get-MpThreatDetection | Format-List *"
Click to expand...

The above might help with the diagnostic process.

I hope this helps.

Paul Black · Aug 13, 2023

W10 Windows Defender Finds Several Threats But History Only Shows One

Hello @v1rrr,

Hey I appreciate the help! Trying said command only shows 3 threats and not the full 49 the scan mentioned.

Click to expand...

Strange, OK, try this for Detections . . .

Code:

@echo off
:: Written by
PowerShell ^
$Tot=((Get-MpThreatDetection) ^| Measure-Object).Count; ^
$List=(Get-MpThreatDetection ^| Select -First 60 ^| Sort-Object -Property InitialDetectionTime -Descending ^| Select ^
@{L=' Detection ID' ;E={;if([string]::IsNullOrWhiteSpace($_.DetectionID)) {'-'} else {$_.DetectionID.Trim('{}')}}}, ^
@{L=' Detection Source Type ID' ;E={;if([string]::IsNullOrWhiteSpace($_.DetectionSourceTypeID)) {'-'} else {$_.DetectionSourceTypeID}}}, ^
@{L=' Threat ID' ;E={;if([string]::IsNullOrWhiteSpace($_.ThreatID)) {'-'} else {$_.ThreatID}}}, ^
@{L=' Threat Status ID' ;E={;if([string]::IsNullOrWhiteSpace($_.ThreatStatusID)) {'-'} else {$_.ThreatStatusID}}}, ^
@{L=' Threat Status Error Code' ;E={;if([string]::IsNullOrWhiteSpace($_.ThreatStatusErrorCode)) {'-'} else {$_.ThreatStatusErrorCode}}}, ^
@{L=' Initial Detection Time' ;E={;if([string]::IsNullOrWhiteSpace($_.InitialDetectionTime)) {'-'} else {$_.InitialDetectionTime}}}, ^
@{L=' Last Threat Status Change Time' ;E={;if([string]::IsNullOrWhiteSpace($_.LastThreatStatusChangeTime)) {'-'} else {$_.LastThreatStatusChangeTime}}}, ^
@{L=' Remediation Time' ;E={;if([string]::IsNullOrWhiteSpace($_.RemediationTime)) {'-'} else {$_.RemediationTime}}}, ^
@{L=' Action Success' ;E={;if([string]::IsNullOrWhiteSpace($_.ActionSuccess)) {'-'} else {$_.ActionSuccess}}}, ^
@{L=' Cleaning Action ID' ;E={;if([string]::IsNullOrWhiteSpace($_.CleaningActionID)) {'-'} else {$_.CleaningActionID}}}, ^
@{L=' Current Threat Execution Status ID';E={;if([string]::IsNullOrWhiteSpace($_.CurrentThreatExecutionStatusID)) {'-'} else {$_.CurrentThreatExecutionStatusID}}}, ^
@{L=' Additional Actions Bit Mask' ;E={;if([string]::IsNullOrWhiteSpace($_.AdditionalActionsBitMask)) {'-'} else {$_.AdditionalActionsBitMask}}}, ^
@{L=' AM Product Version' ;E={;if([string]::IsNullOrWhiteSpace($_.AMProductVersion)) {'-'} else {$_.AMProductVersion}}}, ^
@{L=' Domain User' ;E={;if([string]::IsNullOrWhiteSpace($_.DomainUser)) {'-'} else {$_.DomainUser}}}, ^
@{L=' Process Name' ;E={;if([string]::IsNullOrWhiteSpace($_.ProcessName)) {'-'} else {$_.ProcessName}}}, ^
@{L=' Resources' ;E={;if([string]::IsNullOrWhiteSpace($_.Resources)) {'-'} else {$_.Resources}}}, ^
@{L=' CIM Class' ;E={;if([string]::IsNullOrWhiteSpace($_.CimClass)) {'-'} else {$_.CimClass}}} ^| ^
Format-List ^| Out-String -Width 166).Trim("""`r`n"""); ^
if ($List.Length) {Write-Host """`n --- Antivirus - Microsoft Defender - Active and Past Malware Detections - LAST 60 [if applicable] of [$Tot] - Sorted by [InitialDetectionTime -Descending] ---`n`n$List"""} else ^
{Write-Host """`n --- NO Antivirus - Microsoft Defender - Active and Past Malware Detections Available ---"""; exit 1}
echo. & echo ^>Press ANY key to EXIT . . . & pause >nul & Exit
Click to expand...

I hope this helps.

KaySigmund · Aug 13, 2023

Windows Defender Error Code 0x800106ba

I have done all this. When I go to try and find Windows Defender in the second step there is no Windows Defender listed. Windows Essentials is still listed and it wont let me uninstall it because it will also uninstall other apps.

So now what do you suggest. I still cant get my Windows Defender to work right and feel my computer is unprotected.

This has been that way ever since downloading Windows 10. Which seems to have problems after problems. I dont care for it all. Microsoft real needs to get all bugs worked out before releasing something. I waiting as long as I could to download this.

Windows 10: Windows Defender get-mpthreatdetection CleaningActionID Codes

Windows Defender get-mpthreatdetection CleaningActionID Codes

Windows Defender get-mpthreatdetection CleaningActionID Codes

Windows Defender get-mpthreatdetection CleaningActionID Codes

Windows Defender get-mpthreatdetection CleaningActionID Codes - Similar Threads - Defender mpthreatdetection CleaningActionID

Can't get into Windows Defender

Can't get into Windows Defender

Windows Defender get-mpthreatdetection CleaningActionID Codes

Windows Defender get-mpthreatdetection CleaningActionID Codes

Windows defender code 0x80070422

Windows defender code 0x80070422

Window defender error code

Windows Defender getting renamed to Microsoft Defender

I am getting this message windows defender error code