New value: HKLM\SOFTWARE\Microsoft\Windows Defender\IsServiceRunning = 0x1 Old value: Default\IsServiceRunning = 0x0 If this is an unexpected event you should review the settings as this may be the result of malware. Windows Defender Antivirus Configuration has changed. Microsoft-Windows-Windows Defender/Operational Updated Windows Defender status successfully to SECURITY_PRODUCT_STATE_OFF. This issue can manifest in the form of several different event IDs, all of which have the same underlying cause. Selecting an event from the details pane will show you more information about an event in the lower pane, under the General and Details tabs.
Information about Microsoft Defender Antivirus can be found under Applications and Services Logs > Microsoft > Windows > Windows Defender.įrom there, select Open underneath Operational. Open the Event viewer app by selecting the Search icon in the taskbar, and searching for event viewer. You can find help here if you encounter issues while migrating from a third-party security solution to Microsoft Defender Antivirus.
