Definition Status

Applies To: Windows Server 2008 R2

Definition, or signature, updates are released frequently and are designed to help protect computers from new threats. Windows Defender should have a definition database that is less than 14 days old. Old signatures can be used but they do not detect the latest threats.

Events

Event ID Source Message

2000

Microsoft-Windows-Windows Defender

%1 signature version has been updated.
%tCurrent Signature Version:%b%3
%tPrevious Signature Version:%b%4
%tUpdate Source:%b%6
%tSignature Type:%b%12
%tUpdate Type:%b%14
%tUser:%b%8\%9
%tCurrent Engine Version:%b%15
%tPrevious Engine Version:%b%16

2001

Microsoft-Windows-Windows Defender

%1 has encountered an error trying to update signatures.
%tNew Signature Version:%b%3
%tPrevious Signature Version:%b%4
%tUpdate Source:%b%6
%tSignature Type:%b%12
%tUpdate Type:%b%14
%tUser:%b%8\%9
%tCurrent Engine Version:%b%15
%tPrevious Engine Version:%b%16
%tError code:%b%17
%tError description:%b%18

2004

Microsoft-Windows-Windows Defender

%1 has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
%tSignatures Attempted:%b%4
%tError Code:%b%5
%tError description:%b%6
%tSignatures loading:%b%8
%tLoading signature version:%b%9
%tLoading engine version:%b%10

Windows Defender Definitions

Core Security