{"id":51221,"date":"2023-06-03T14:15:32","date_gmt":"2023-06-03T08:45:32","guid":{"rendered":"http:\/\/198.58.113.91\/blog\/?p=51221"},"modified":"2024-04-29T11:37:04","modified_gmt":"2024-04-29T06:07:04","slug":"defender-offline-scan-stop-91-percent","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/defender-offline-scan-stop-91-percent\/","title":{"rendered":"Microsoft Defender Offline Scan Stops at 91%?"},"content":{"rendered":"<p>Microsoft Defender Offline is an antimalware scanning tool that lets you boot and run a scan from a trusted environment. It utilizes Windows RE to run the offline scan.<\/p>\n<p>During the Microsoft Defender Offline scan, it may appear to the user that the scan stalled or crashed at 91%, 92%, or 93% on some systems. This article tells you how to check if the last Microsoft Defender Offline scan was completed correctly.<!--more--><\/p>\n<div class=\"rp\"><strong>RELATED:<\/strong> <a href=\"https:\/\/www.winhelponline.com\/blog\/start-windows-defender-offline-scan\/\">How to Start Microsoft Defender Offline Scan in Windows 10\/11<\/a><\/div>\n<h2>Cause<\/h2>\n<p>The &#8220;Percent complete&#8221; indicator in the Microsoft Defender Offline scan is entirely <strong>inaccurate<\/strong>. For example, check these images.<\/p>\n<p><strong>92622<\/strong> files have been scanned. The percentage is 93.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-51225\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/06\/wdo_scan_progress_1.jpg\" alt=\"defender completes scan at 92%\" width=\"750\" height=\"375\" \/><\/p>\n<p><strong>95417<\/strong> files have been scanned. The percentage remains at 93.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-51226\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/06\/wdo_scan_progress_2.jpg\" alt=\"defender completes scan at 92%\" width=\"750\" height=\"375\" \/><\/p>\n<p><strong>115417<\/strong> files have been scanned. The percentage remains at 93.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-51227\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/06\/wdo_scan_progress_4.jpg\" alt=\"defender completes scan at 93%\" width=\"750\" height=\"372\" \/><\/p>\n<p>As long as the number in the &#8220;Items scanned&#8221; increases, it means scanning progresses well.<\/p>\n<p>It&#8217;s OK if Microsoft Defender Offline closes and reboots the computer before the progress percentage reaches 100%. Not sure on what basis the &#8220;percent complete&#8221; value is calculated, but it&#8217;s <strong>not<\/strong> even approximate. Therefore, the field should be <strong>ignored<\/strong> completely.<\/p>\n<h2>Check the status of the last Offline Scan<\/h2>\n<p>To correctly know the status or the return code of the previous Microsoft Defender Offline scan, inspect the <code><strong>msssWrapper.log<\/strong><\/code> file. The log file is located in the following path:<\/p>\n<pre>C:\\Windows\\Microsoft Antimalware\\Support\\msssWrapper.log<\/pre>\n<p>The recent entries are at the bottom of the log. Open the log using Notepad and scroll to the bottom part of the file.<\/p>\n<p>If you see the following line at the end of the log, it means the last scan ran correctly.<\/p>\n<pre>Offline scan completed with 0x00000000<\/pre>\n<p>(Code <code>0<\/code> or <code>0x00000000<\/code> means SUCCESS.)<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-51229\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/06\/wdo-scan-log.png\" alt=\"microsoft defender offline scan log\" width=\"716\" height=\"482\" \/><\/p>\n<div class=\"qt\">\n<p>The Microsoft article <a href=\"https:\/\/learn.microsoft.com\/en-us\/microsoft-365\/security\/defender-endpoint\/microsoft-defender-offline?view=o365-worldwide\" target=\"_blank\" rel=\"noopener nofollow\">Microsoft Defender Offline in Windows | Microsoft Learn<\/a> states the following:<\/p>\n<h4>Where can I find the scan results?<\/h4>\n<p>To see the Microsoft Defender Offline scan results:<\/p>\n<ul>\n<li>Select Start, then Settings &gt; Update &amp; Security &gt; Windows Security &gt; Virus &amp; threat protection.<\/li>\n<li>On the Virus &amp; Threat protection screen, under Current threats, select Scan options and Protection history.\n<div class=\"newline\"><strong>Screenshots:<\/strong><\/div>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-74630\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/06\/wdo-scan-1.jpg\" alt=\"microsoft defender offline scanner\" width=\"750\" height=\"272\" \/><\/p>\n<p><figure id=\"attachment_74629\" aria-describedby=\"caption-attachment-74629\" style=\"width: 740px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-74629 size-full\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/06\/wdo-scan-2.png\" alt=\"microsoft defender offline scanner - malware threat history\" width=\"750\" height=\"590\" \/><figcaption id=\"caption-attachment-74629\" class=\"wp-caption-text\">Malware detected using Microsoft Defender (offline scan) &#8211; Protection history page<\/figcaption><\/figure><\/li>\n<\/ul>\n<p>However, the above applies only if the offline scan detected malware. Else, the Protection history page doesn&#8217;t show anything about the last offline scan.<\/p>\n<\/div>\n<h2>INFO: A sample msssWrapper.log file<\/h2>\n<p>Here are the contents of a sample <code><strong>msssWrapper.log<\/strong><\/code> file.<\/p>\n<pre>START  2024\/04\/28 15:48:41:800 TID:1692 PID:1660\n\nINFO    2024\/04\/28 15:48:41:800 TID:1692 PID:1660\nLoading offline registry library returned 0x00000000\n\nINFO    2024\/04\/28 15:48:41:800 TID:1692 PID:1660\nBinary architecture is amd64\n\nINFO    2024\/04\/28 15:48:41:831 TID:1692 PID:1660\nUtilIsFileExists(E:\\WINDOWS\\SysWOW64\\ntdll.dll) returned 0x00000000\n\nINFO    2024\/04\/28 15:48:41:831 TID:1692 PID:1660\nCheckProcessorArchitecture returned 0x00000000\n\nINFO    2024\/04\/28 15:48:41:831 TID:1692 PID:1660\nSetting target OS key: \"E:\\WINDOWS\"\n\nINFO    2024\/04\/28 15:48:41:831 TID:1692 PID:1660\nSetRecoveryEnvironmentKey returned 0x00000000\n\nINFO    2024\/04\/28 15:48:41:940 TID:1692 PID:1660\nMapping target OS C drive to WinPE E drive\n\nINFO    2024\/04\/28 15:48:41:940 TID:1692 PID:1660\nMapping target OS D drive to WinPE C drive\n\nINFO    2024\/04\/28 15:48:41:940 TID:1692 PID:1660\nMapping target OS E drive to WinPE D drive\n\nINFO    2024\/04\/28 15:48:41:972 TID:1692 PID:1660\nBuildTargetOSDriveMapping returned 0x00000000\n\nINFO    2024\/04\/28 15:48:41:972 TID:1692 PID:1660\nSearching for signatures. Default signature path: \"\"\n\nINFO    2024\/04\/28 15:48:41:972 TID:1692 PID:1660\nSearching for signatures at root of drives...\n\nWARNING 2024\/04\/28 15:48:41:972 TID:1692 PID:1660\nMissing definitions file in 'C:\\mpam-fex64.exe'\n\nWARNING 2024\/04\/28 15:48:41:972 TID:1692 PID:1660\nMissing definitions file in 'D:\\mpam-fex64.exe'\n\nWARNING 2024\/04\/28 15:48:41:972 TID:1692 PID:1660\nMissing definitions file in 'E:\\mpam-fex64.exe'\n\nWARNING 2024\/04\/28 15:48:41:972 TID:1692 PID:1660\nMissing definitions file in 'F:\\mpam-fex64.exe'\n\nWARNING 2024\/04\/28 15:48:41:972 TID:1692 PID:1660\nMissing definitions file in 'X:\\mpam-fex64.exe'\n\nINFO    2024\/04\/28 15:48:41:972 TID:1692 PID:1660\nSearching for signatures from installed product on target OS\n\nINFO    2024\/04\/28 15:48:42:987 TID:1692 PID:1660\nLooking for Defender registry key on target OS\n\nINFO    2024\/04\/28 15:48:42:987 TID:1692 PID:1660\nMapped target os path (C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{F79A0553-A974-4973-A00E-6391E4B00807}) to winpe path (E:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{F79A0553-A974-4973-A00E-6391E4B00807})\n\nINFO    2024\/04\/28 15:48:42:987 TID:1692 PID:1660\nFound signatures on the target OS at E:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{F79A0553-A974-4973-A00E-6391E4B00807}\n\nINFO    2024\/04\/28 15:48:43:081 TID:1692 PID:1660\nSearchForSignatures returned 0x00000000\n\nINFO    2024\/04\/28 15:48:44:096 TID:1692 PID:1660\nLooking for Defender registry key on target OS\n\nINFO    2024\/04\/28 15:48:44:096 TID:1692 PID:1660\nMapped target os path (C:\\ProgramData\\Microsoft\\Windows Defender) to winpe path (E:\\ProgramData\\Microsoft\\Windows Defender)\n\nINFO    2024\/04\/28 15:48:44:205 TID:1692 PID:1660\nInitializing offline environment and service...\n\nINFO    2024\/04\/28 15:48:45:911 TID:1692 PID:1660\nXCopySignatures returned hr = 0x0\n\nINFO    2024\/04\/28 15:48:57:054 TID:1692 PID:1660\nGetTempPath2W where sigs would unpack = \n\nINFO    2024\/04\/28 15:48:57:054 TID:1692 PID:1660\nSignatures are already fairly recent. Skipping sig update.\n\nINFO    2024\/04\/28 15:48:57:054 TID:1692 PID:1660\nAS Signature Version: 1.409.569.0\n\nINFO    2024\/04\/28 15:48:57:054 TID:1692 PID:1660\nEngine Version: 1.1.24030.4\n\nINFO    2024\/04\/28 15:48:57:054 TID:1692 PID:1660\nLaunching user interface...\n\nINFO    2024\/04\/28 15:48:57:054 TID:1692 PID:1660\nAuto-scan mode selected...\n\nINFO    2024\/04\/28 15:48:57:069 TID:1692 PID:1660\nRegistered for notifications\n\nINFO    2024\/04\/28 15:48:57:069 TID:1692 PID:1660\nAutomatic scan started\n\nINFO    2024\/04\/28 15:48:57:069 TID:1692 PID:1660\nLaunched Console UI, waiting...\n\nINFO    2024\/04\/28 15:56:19:770 TID:1704 PID:1660\nCALLBACK: Scan complete.  hResult=0x0, threat count=1\n\nINFO    2024\/04\/28 15:56:19:770 TID:1692 PID:1660\nWait finished (Scan signaled)\n\nINFO    2024\/04\/28 15:56:19:770 TID:1692 PID:1660\nGetting results from scan...\n\nINFO    2024\/04\/28 15:56:19:770 TID:1692 PID:1660\nScan completed successfully, attempting to clean any active malware.  Number of threats from scan: 1\n\nINFO    2024\/04\/28 15:56:19:770 TID:1692 PID:1660\n<strong>STARTING LIST OF DETECTED THREATS:\n\nINFO    2024\/04\/28 15:56:19:770 TID:1692 PID:1660\n1: Found HackTool:Win32\/DefenderControl!MSR (0x80042394).\n\nINFO    2024\/04\/28 15:56:19:770 TID:1692 PID:1660\n        Resource 1: Main OS based Path = C:\\Program Files (x86)\\DefenderControl\\dControl.exe  WinRE based Path = E:\\Program Files (x86)\\DefenderControl\\dControl.exe.\n\nINFO    2024\/04\/28 15:56:19:770 TID:1692 PID:1660\n        Resource 2: Main OS based Path = C:\\Users\\Public\\Desktop\\DefenderControl.lnk  WinRE based Path = E:\\Users\\Public\\Desktop\\DefenderControl.lnk.\n\nINFO    2024\/04\/28 15:56:19:770 TID:1692 PID:1660\nLIST OF DETECTED THREATS COMPLETE. Found 0 threats requiring user-defined action.<\/strong>\n\nINFO    2024\/04\/28 15:56:19:770 TID:1692 PID:1660\nSTARTING CLEANING (using default action on all detected threats):\n\nINFO    2024\/04\/28 15:56:25:051 TID:1692 PID:1660\nCALLBACK: Scan complete.  hResult=0x0, threat count=1\n\nINFO    2024\/04\/28 15:56:25:472 TID:1692 PID:1660\nRemediation: Successfully completed action Quarantine on threat 0x80042394.\n\nINFO    2024\/04\/28 15:56:25:472 TID:1692 PID:1660\nCLEANING COMPLETE.\n\nINFO    2024\/04\/28 15:56:25:488 TID:1692 PID:1660\nRunCallisto returned 0x00000000\n\nINFO    2024\/04\/28 15:56:25:535 TID:1692 PID:1660\nPreserveCallistoDetections returned 0x00000000\n\nERROR   2024\/04\/28 15:56:25:535 TID:1692 PID:1660\nUnable to open the offline HKLM SOFTWARE hive with 0x80070020\n\nERROR   2024\/04\/28 15:56:25:535 TID:1692 PID:1660\nUnable to open the offline HKLM hive with 0x80070020\n\nINFO    2024\/04\/28 15:56:25:535 TID:1692 PID:1660\nSetOfflineScanRunFlag returned 0x80070020\n\nINFO    2024\/04\/28 15:56:25:535 TID:1692 PID:1660\n<strong>Offline scan completed with 0x00000000<\/strong>\n\nFINISH  2024\/04\/28 15:56:25:535 TID:1664 PID:1660\n<\/pre>\n<p>The above log shows that a threat was found and remediated. It&#8217;s also shown in the Protection history page.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/06\/wdo-threat-protection-history.png\" alt=\"defender offline - threat history in windows security\" width=\"701\" height=\"631\" class=\"alignnone size-full wp-image-74997\" \/><\/p>\n<p><strong>Editor&#8217;s note: <\/strong>In addition to <code>msssWrapper.log<\/code>, you may find the following logs helpful.<\/p>\n<pre>C:\\Windows\\Microsoft Antimalware\\Support\\MPDetection-[date]-[time].log\nC:\\Windows\\Microsoft Antimalware\\Support\\MPLog-[date]-[time].log\n<\/pre>\n<p>I hope the above information helps. Let&#8217;s know your comments.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft Defender Offline is an antimalware scanning tool that lets you boot and run a scan from a trusted environment. It utilizes Windows RE to run the offline scan. During the Microsoft Defender Offline scan, it may appear to the user that the scan stalled or crashed at 91%, 92%, or 93% on some systems. &#8230; <a title=\"Microsoft Defender Offline Scan Stops at 91%?\" class=\"read-more\" href=\"https:\/\/www.winhelponline.com\/blog\/defender-offline-scan-stop-91-percent\/\" aria-label=\"Read more about Microsoft Defender Offline Scan Stops at 91%?\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[8,869],"tags":[661],"class_list":["post-51221","post","type-post","status-publish","format-standard","hentry","category-windows-10","category-windows-11","tag-windows-defender"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":3689,"url":"https:\/\/www.winhelponline.com\/blog\/start-windows-defender-offline-scan\/","url_meta":{"origin":51221,"position":0},"title":"How to Start Microsoft Defender Offline Scan in Windows 10\/11","author":"Ramesh","date":"August 4, 2016","format":false,"excerpt":"Malware is more complex today than it was many years ago. It operates at the filter driver, service, or rootkit level, and eliminating it is tough. Sometimes, you need to boot to the Windows RE environment and then delete the core malware files and services added to your Windows installation.\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"Microsoft Defender Offline scan - Virus and threat protection - Windows Security","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/08\/wdo-scan-4.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/08\/wdo-scan-4.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/08\/wdo-scan-4.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":4553,"url":"https:\/\/www.winhelponline.com\/blog\/scan-using-malicious-software-removal-tool-msrt-mss\/","url_meta":{"origin":51221,"position":1},"title":"Scanning your PC using Malicious Software Removal Tool (MSRT) and Microsoft Safety Scanner","author":"Ramesh","date":"November 9, 2016","format":false,"excerpt":"Microsoft Malicious Software Removal Tool (MSRT) is a post-infection removal tool which is updated every month and rolled out through the Windows Update channel. Malicious software scanning runs as you install MSRT from Windows Update. You can also initiate scans manually whenever needed by running mrt.exe in the Windows\\System32 directory.\u2026","rel":"","context":"In &quot;Utilities&quot;","block_context":{"text":"Utilities","link":"https:\/\/www.winhelponline.com\/blog\/category\/utilities\/"},"img":{"alt_text":"msrt vs defender","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/11\/msrt-defender.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":3862,"url":"https:\/\/www.winhelponline.com\/blog\/windows-defender-scan-cascading-menu-desktop\/","url_meta":{"origin":51221,"position":2},"title":"Add Microsoft Defender Options as Cascading Right-Click Menu in Desktop","author":"Ramesh","date":"August 19, 2016","format":false,"excerpt":"Here is a registry tweak that adds some Windows Defender options to the Desktop Context menu as a cascading menu so you can quickly run a scan, update, or open Microsoft Defender. Download defender_menu.zip, unzip it and run the enclosed REG file. When you right-click on the desktop, you'll see\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"defender scan options as cascading menu","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/08\/defender-cascade-options.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":5125,"url":"https:\/\/www.winhelponline.com\/blog\/windows-defender-disabled-real-time-protection-virus\/","url_meta":{"origin":51221,"position":3},"title":"Microsoft Defender: &#8220;Managed by your administrator&#8221; or &#8220;Your IT administrator has limited access&#8221;","author":"Ramesh","date":"January 23, 2017","format":false,"excerpt":"In the aftermath of a malware attack, the Windows Defender Security settings page may show the message Some settings are managed by your organization\u00a0or This setting is managed by your administrator. The real-time protection and cloud-based protection options may remain disabled or grayed out. Here is what the Windows Defender\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"Microsoft Defender Antivirus group policy settings","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/01\/windows-defender-gpedit-ui.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/01\/windows-defender-gpedit-ui.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/01\/windows-defender-gpedit-ui.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/01\/windows-defender-gpedit-ui.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":1569,"url":"https:\/\/www.winhelponline.com\/blog\/schedule-windows-defender-scan-windows-10\/","url_meta":{"origin":51221,"position":4},"title":"How to Schedule Microsoft Defender Scan in Windows 10\/11","author":"Ramesh","date":"February 4, 2016","format":false,"excerpt":"Microsoft Defender's command-line utility MpCmdrun.exe is used for scheduling scans or updating the signatures using the command-line. This post tells you how to set up\u00a0Microsoft Defender to scan the computer daily at a specified time using Task Scheduler and in Windows 10 or 11. Note: Windows already includes the Automatic\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"windows defender scan schedule","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/w10-dfnder-sch-10.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/w10-dfnder-sch-10.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/w10-dfnder-sch-10.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":17887,"url":"https:\/\/www.winhelponline.com\/blog\/windows-defender-identifies-same-threat-repeatedly\/","url_meta":{"origin":51221,"position":5},"title":"Windows Defender Shows the Same Threat Repeatedly. How to Clear the Protection History","author":"Ramesh","date":"August 14, 2020","format":false,"excerpt":"On some Windows 10 and 11 computers, Microsoft Defender Antivirus may repeatedly warn about the same threat, although you've taken the necessary action (remediated) on that threat. When you click \"Start actions\" after choosing \"Remove\", nothing happens. Windows Defender would keep showing that non-existent threat. Cause This is caused by\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"detectionhistory folder contents","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/08\/defender-detection-history-delete.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/08\/defender-detection-history-delete.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/08\/defender-detection-history-delete.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/08\/defender-detection-history-delete.png?resize=700%2C400&ssl=1 2x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/51221","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/comments?post=51221"}],"version-history":[{"count":0,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/51221\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/media?parent=51221"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/categories?post=51221"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/tags?post=51221"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}