Windows 10 Defender Quick Scan not remembered

[Gil_G]

I keep seeing requests for quick scans every few days in Defender. Should be more time between requests.


I checked the Defender log, and extracting from recent sequential Events 1151, I get this:


2020-02-16 Last quick scan age: 0 Last full scan age: 50

2020-02-17 Last quick scan age: 1 Last full scan age: 51

2020-02-18 Last quick scan age: 4294967295 Last full scan age: 52

2020-02-19 Last quick scan age: 4294967295 Last full scan age: 53

2020-02-20 Last quick scan age: 4294967295 Last full scan age: 54

here I did a manual quick scan

2020-02-20 Last quick scan age: 0 Last full scan age: 54

2020-02-21 Last quick scan age: 1 Last full scan age: 55

2020-02-22 Last quick scan age: 4294967295 Last full scan age: 56

2020-02-23 Last quick scan age: 4294967295 Last full scan age: 572020-02-24 Last quick scan age: 4294967295 Last full scan age: 58

2020-02-25 Last quick scan age: 4294967295 Last full scan age: 59

here I did another manual quick scan

2020-02-26 Last quick scan age: 0 Last full scan age: 59


Of note, here is the complete report when the last quick scan was completed and quick scan age was reset to 0:


Endpoint Protection client health report (time in UTC):
Platform version: 4.18.1911.3
Engine version: 1.1.16800.2
Network Realtime Inspection engine version: 1.1.16800.2
Antivirus security intelligence version: 1.311.77.0
Antispyware security intelligence version: 1.311.77.0
Network Realtime Inspection security intelligence version: 1.311.77.0
RTP state: Enabled
OA state: Enabled
IOAV state: Enabled
BM state: Enabled
Antivirus security intelligence age: 0
Antispyware security intelligence age: 0
Last quick scan age: 0
Last full scan age: 59
Antivirus security intelligence creation time: 2/26/2020 12:31:42 AM
Antispyware security intelligence creation time: 2/26/2020 12:31:42 AM
Last quick scan start time: 2/26/2020 4:49:59 AM
Last quick scan end time: 2/26/2020 4:50:56 AM
Last quick scan source: 1
Last full scan start time: 12/28/2019 3:46:28 PM
Last full scan end time: 12/28/2019 6:25:49 PM
Last full scan source: 1
Product status: 0x00080000


And here is the report right before, when the quick scan age is wrong:


Endpoint Protection client health report (time in UTC):
Platform version: 4.18.1911.3
Engine version: 1.1.16800.2
Network Realtime Inspection engine version: 1.1.16800.2
Antivirus security intelligence version: 1.311.77.0
Antispyware security intelligence version: 1.311.77.0
Network Realtime Inspection security intelligence version: 1.311.77.0
RTP state: Enabled
OA state: Enabled
IOAV state: Enabled
BM state: Enabled
Antivirus security intelligence age: 0
Antispyware security intelligence age: 0
Last quick scan age: 4294967295
Last full scan age: 59
Antivirus security intelligence creation time: 2/26/2020 12:31:42 AM
Antispyware security intelligence creation time: 2/26/2020 12:31:42 AM
Last quick scan start time: 1/1/1601 12:00:00 AM
Last quick scan end time: 1/1/1601 12:00:00 AM
Last quick scan source: 0
Last full scan start time: 12/28/2019 3:46:28 PM
Last full scan end time: 12/28/2019 6:25:49 PM
Last full scan source: 1
Product status: 0x00080080

Clearly something gets screwed up with the scan dates after a couple of days following a quick scan, which gets reset to 0 following a quick scan.


Any ideas?

Continue reading...