| Event Id | 1005 |
| Source | Microsoft-Windows-Windows Defender |
| Description | %1 scan has encountered an error and terminated. %tScan ID:%b%3 %tScan Type:%b%5 %tScan Parameters:%b%7 %tUser:%b%8\%9 %tError Code:%b%11 %tError description:%b%12 |
| Event Information | According to Microsoft : Cause : This event is logged when scan has encountered an error and terminated. Resolution : Fix Microsoft Antimalware Engine To determine how to fix this error condition, examine the error code reported in the event message test. The event message can report the following error codes: 1)ERR_MP_NOT_FOUND (0x80508019) 2)ERR_MP_NO_MEMORY (0x80508007) 3)ERR_BAD_INPUT_DATA (0x8050800C) 4)ERR_MP_BAD_CONFIGURATION (0x80508020) Note:To perform these procedures, you must be a member of the Administrators group, or you must have been delegated the appropriate authority. ERR_MP_NOT_FOUND (0x80508019) This error code indicates that a file or location (for example, a folder or drive) included in the scan does not exist. You should ensure that all drives being scanned are online or have disks inserted. Optionally, you can exclude the files or locations that are not available. To exclude files or locations in Windows Defender: 1)ClickStart, point toAll Programs, and then click Windows Defender. 2)Click Tools, and then clickOptions. 3)UnderAdvanced Options, clickAdd. 4.Browse to the file or location to be excluded, and then click OK. 5.Repeat steps 2 - 4 for each file or location to be excluded. ERR_MP_NO_MEMORY (0x80508007) This error code indicates that your computer is low on resources. You should free up some memory on your computer. To free up memory on your computer: 1.Right-click the taskbar, and then clickTask Manager. 2.Click theApplications tab and make sure that the status of all tasks isRunning. If any tasks have the status Not responding, you can end the task by clickingEnd Task. 3.Click theProcesses tab. 4.ClickMemory and investigate processes that are using a lot of memory. 5.If there are no tasks with the statusNot responding or processes that are using a lot of memory, you should restart the computer to free up memory. Note :You can only end processes that were created by you when logged on as a member of the Users group. To end processes that are running in the context of the SYSTEM account, you must log on to the computer as a member of the Adminstrators group. ERR_MP_BAD_INPUT_DATA (0x8050800C) This error code indicates that an internal error has occurred. You should restart your computer. ERR_MP_BAD_CONFIGURATION (0x80508020) This error code indicates that there is a configuration issue with Windows Defender. You should update Windows Defender by using Windows Update. To update Windows Defender by using Windows Update: 1.ClickStart, and then clickControl Panel. 2.Under Security, clickCheck for Updates. 3.Select the updates related to Windows Defender, and then clickInstall. 4.If there are no updates available for Windows Defender, you should restart your computer to fix the scanning engine. Verify : A full scan in Windows Defender uses the scanning engine to check all of the files on your hard disk and all currently running programs. If the scanning engine is not working correctly, the full scan will fail. To perform this procedure, you must be a member of the Users group, or you must have been delegated the appropriate authority. To verify that the scanning engine is working correctly: 1.ClickStart, point to All Programs, and then clickWindows Defender. 2.Click the down arrow next to Scan, and then clickFull Scan. 3.If the full scan completes successfully, the scanning engine is working correctly. |
| Reference Links | Event ID 1005 from Source Microsoft-Windows-Windows Defender |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.