Event ID - 6406

Event Id6406
SourceWindows File Protection
DescriptionThe system file Filename was not restored to its original, valid version because the WFP restoration process was canceled by user interaction, user name is UserID.
Event InformationThe Windows File Protection feature (WFP) logs an event if WFP is canceled while it is performing a scan of the system files or attempting to replace an individual file. This information is recorded for later review in the System event log.
Reference LinksWindows File Protection Creates Event Log Entry When Scanning Is Stopped

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.