Event ID 1004 — Microsoft Antimalware Engine Scan

Applies To: Windows Server 2008

A scan is used to invoke the scanning engine and look for spyware and other potentially unwanted software on your computer. Windows Defender can run a quick scan, a full system scan, or a customized scan on a computer:

  • Quick scan - checks only the places on your computer's hard disk that spyware or other potentially unwanted software are most likely to infect.
  • Full scan - checks all of the files on your hard disk and all currently running programs.
  • Customized scan - checks only the drives, files, and folders that you specify.

Event Details

Product: Windows Defender
ID: 1004
Source: Microsoft-Windows-Windows Defender
Version: 1.1
Symbolic Name: MALWAREPROTECTION_SCAN_RESUMED
Message: %1 scan has resumed.
%tScan ID:%b%3
%tScan Type:%b%5
%tScan Parameters:%b%7
%tUser:%b%8\%9

Resolve

This is a normal condition. No further action is required.

Microsoft Antimalware Engine Scan

Windows Defender