Event ID 1000 — Microsoft Antimalware Engine Scan

Applies To: Windows Server 2008 R2

A scan is used to invoke the scanning engine and look for spyware and other potentially unwanted software on your computer. Windows Defender can run a quick scan, a full system scan, or a customized scan on a computer:

  • Quick scan - checks only the places on your computer's hard disk that spyware or other potentially unwanted software are most likely to infect.
  • Full scan - checks all of the files on your hard disk and all currently running programs.
  • Customized scan - checks only the drives, files, and folders that you specify.

Event Details

Product: Windows Operating System
ID: 1000
Source: Microsoft-Windows-Windows Defender
Version: 6.1
Message: %1 scan has started.
%tScan ID:%b%3
%tScan Type:%b%5
%tScan Parameters:%b%7


This is a normal condition. No further action is required.

Microsoft Antimalware Engine Scan

Core Security