Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                

MP CMD Run

Download as txt, pdf, or txt
Download as txt, pdf, or txt
You are on page 1of 5
At a glance
Powered by AI
The logs document the monitoring and updating of Windows Defender signatures and processes over multiple days. Signatures and definitions are regularly updated through a process that involves downloading, installing, and verifying new signatures. Periodic idle tasks clean up files and processes.

The logs show that Windows Defender monitors processes like signature updates, downloading definition updates, and running a SpyNet service. It also performs regular scans to check for malware.

The signature update process involves searching for available updates online, downloading the update files, installing the new signatures in stages (with progress reported), and verifying that the update completed successfully.

--------------------------------------------------------------------------------

-----
MpCmdRun: Command Line: "C:\Program Files\Windows Defender\\MpCmdRun.exe" Signat
ureUpdate -ScheduleJob -RestrictPrivileges
Start Time: dom. mar. 19 2017 18:43:27
Run as Network Service
MpCmdRun: End Time: dom. mar. 19 2017 18:43:28
--------------------------------------------------------------------------------
-----

--------------------------------------------------------------------------------
-----
MpCmdRun: Command Line: "C:\Program Files\Windows Defender\\MpCmdRun.exe" SpyNet
ServiceDss -RestrictPrivileges -AccessKey 19775669-548D-D4FB-890F-2A75D80DF04A
Start Time: lun. mar. 20 2017 02:06:54
Run as Network Service
MpCmdRun: End Time: lun. mar. 20 2017 02:06:54
--------------------------------------------------------------------------------
-----

--------------------------------------------------------------------------------
-----
MpCmdRun: Command Line: "C:\Program Files\Windows Defender\\MpCmdRun.exe" Signat
ureUpdate -ScheduleJob -RestrictPrivileges
Start Time: lun. mar. 20 2017 06:05:27
Run as Network Service
MpCmdRun: End Time: lun. mar. 20 2017 06:05:27
--------------------------------------------------------------------------------
-----

--------------------------------------------------------------------------------
-----
MpCmdRun: Command Line: "C:\Program Files\Windows Defender\\MpCmdRun.exe" Signat
uresUpdateService -ScheduleJob -UnmanagedUpdate
Start Time: lun. mar. 20 2017 06:05:28
Start: Signatures Update Service
Update Started
Search Started (MU/WU update) (Path: http://www.microsoft.com)...
Search Completed
Download Started...
Time Info - lun. mar. 20 2017 06:05:56 Download Progress-
Update Index:0 of 1 - 100%
Download Progress-
Update Index:0 of 1 - 100%
Download Completed
Download Completed
Installation Started...
Installation Progress-
Percent Complete:20,
Current Update Index:0 (of 1)
Installation Progress-
Percent Complete:40,
Current Update Index:0 (of 1)
Time Info - lun. mar. 20 2017 06:06:21 Installation Progress-
Percent Complete:60,
Current Update Index:0 (of 1)
Time Info - lun. mar. 20 2017 06:07:44 Installation Progress-
Percent Complete:80,
Current Update Index:0 (of 1)
Time Info - lun. mar. 20 2017 06:08:08 Installation Progress-
Percent Complete:100,
Current Update Index:0 (of 1)
Installation Progress-
Percent Complete:100,
Current Update Index:0 (of 1)
Installation Completed
Update completed succesfully
End: Signatures Update Service
MpCmdRun: End Time: lun. mar. 20 2017 06:08:09
--------------------------------------------------------------------------------
-----

--------------------------------------------------------------------------------
-----
MpCmdRun: Command Line: "C:\Program Files\Windows Defender\\MpCmdRun.exe" SpyNet
Service -RestrictPrivileges -AccessKey 111C6650-507C-26E4-829E-07A3BE9BF2DF
Start Time: mar. mar. 21 2017 06:54:33
Run as Network Service
MpCmdRun: End Time: mar. mar. 21 2017 06:54:33
--------------------------------------------------------------------------------
-----

--------------------------------------------------------------------------------
-----
MpCmdRun: Command Line: "C:\Program Files\Windows Defender\\MpCmdRun.exe" Signat
ureUpdate -ScheduleJob -RestrictPrivileges
Start Time: jue. mar. 23 2017 06:48:20
Run as Network Service
MpCmdRun: End Time: jue. mar. 23 2017 06:48:20
--------------------------------------------------------------------------------
-----

--------------------------------------------------------------------------------
-----
MpCmdRun: Command Line: "C:\Program Files\Windows Defender\\MpCmdRun.exe" Signat
uresUpdateService -ScheduleJob -UnmanagedUpdate
Start Time: jue. mar. 23 2017 06:48:21
Start: Signatures Update Service
Update Started
Search Started (MU/WU update) (Path: http://www.microsoft.com)...
Search Completed
Download Started...
Download Progress-
Update Index:0 of 1 - 0%
Time Info - jue. mar. 23 2017 06:51:06 Download Progress-
Update Index:0 of 1 - 100%
Download Progress-
Update Index:0 of 1 - 100%
Download Completed
Download Completed
Time Info - jue. mar. 23 2017 06:51:17 Installation Started...
Installation Started...
Download Completed
Update failed with hr: 0x80240016
Update completed with hr: 0x80240016
End: Signatures Update Service
MpCmdRun: End Time: jue. mar. 23 2017 06:51:17
--------------------------------------------------------------------------------
-----

--------------------------------------------------------------------------------
-----
MpCmdRun: Command Line: "C:\Program Files\Windows Defender\MpCmdRun.exe" Scan -S
cheduleJob
Start Time: jue. mar. 23 2017 07:04:37
Starting RunCommandScan.
RunCommandScan is using default scan type: 1.
Scanning path as file: (null).
Start: MpScan(MP_FEATURE_SUPPORTED, dwOptions=16385, Timeout in days = 1)
MpScan() started
art Time: jue. mar. 23 2017 07:04:37
Start: Idle Task - WdCleanup
Time Info - jue. mar. 23 2017 07:05:38 Service stopped. Exiting Idle TaskEnd: Idle T
ask - WdCleanup
MpCmdRun: End Time: jue. mar. 23 2017 07:05:38
--------------------------------------------------------------------------------
-----
cation
Time Info - jue. mar. 23 2017 07:05:38 Service stopped. Exiting Idle TaskEnd: Idle T
ask - WdVerification
MpCmdRun: End Time: jue. mar. 23 2017 07:05:38
--------------------------------------------------------------------------------
-----
ance

--------------------------------------------------------------------------------
-----
MpCmdRun: Command Line: "C:\Program Files\Windows Defender\MpCmdRun.exe" -IdleTa
sk -TaskName WdCleanup
Start Time: jue. mar. 23 2017 17:28:54
Start: Idle Task - WdCleanup
Time Info - jue. mar. 23 2017 17:29:56 Service stopped. Exiting Idle TaskEnd: Idle T
ask - WdCleanup
MpCmdRun: End Time: jue. mar. 23 2017 17:29:56
--------------------------------------------------------------------------------
-----
using deTime Info - jue. mar. 23 2017 17:29:56 Service stopped. Exiting Idle TaskEnd
: Idle Task - WdVerification
MpCmdRun: End Time: jue. mar. 23 2017 17:29:56
--------------------------------------------------------------------------------
-----

--------------------------------------------------------------------------------
-----
MpCmdRun: Command Line: "C:\Program Files\Windows Defender\\MpCmdRun.exe" Signat
ureUpdate -ScheduleJob -RestrictPrivileges
Start Time: jue. mar. 23 2017 18:14:16
Run as Network Service
MpCmdRun: End Time: jue. mar. 23 2017 18:14:16
--------------------------------------------------------------------------------
-----

--------------------------------------------------------------------------------
-----
MpCmdRun: Command Line: "C:\Program Files\Windows Defender\\MpCmdRun.exe" SpyNet
ServiceDss -RestrictPrivileges -AccessKey 04B4111D-72F1-73CD-5875-86A1453906FC
Start Time: vie. mar. 24 2017 01:22:14
Run as Network Service
MpCmdRun: End Time: vie. mar. 24 2017 01:22:14
--------------------------------------------------------------------------------
-----

--------------------------------------------------------------------------------
-----
MpCmdRun: Command Line: "C:\Program Files\Windows Defender\\MpCmdRun.exe" Signat
ureUpdate -ScheduleJob -RestrictPrivileges
Start Time: sb. mar. 25 2017 17:16:22
Run as Network Service
MpCmdRun: End Time: sb. mar. 25 2017 17:16:22
--------------------------------------------------------------------------------
-----

--------------------------------------------------------------------------------
-----
MpCmdRun: Command Line: "C:\Program Files\Windows Defender\\MpCmdRun.exe" Signat
uresUpdateService -ScheduleJob -UnmanagedUpdate
Start Time: sb. mar. 25 2017 17:16:23
Start: Signatures Update Service
Update Started
Search Started (MU/WU update) (Path: http://www.microsoft.com)...
Search Completed
Download Started...
Download Progress-
Update Index:0 of 1 - 0%
Time Info - sb. mar. 25 2017 17:16:51 Download Progress-
Update Index:0 of 1 - 100%
Download Progress-
Update Index:0 of 1 - 100%
Download Completed
Download Completed
Installation Started...
Installation Progress-
Percent Complete:100,
Current Update Index:0 (of 1)
Installation Completed
Update completed succesfully
End: Signatures Update Service
MpCmdRun: End Time: sb. mar. 25 2017 17:16:56
--------------------------------------------------------------------------------
-----

You might also like