Forum Discussion

Brass Contributor

Sep 21, 2023

Solved

"Run Antivirus Scan" results in "Antivirus scan failed"

I'm responding to an alert and via the Microsoft 365 Security portal I've triggered off a full antivirus scan: However shortly after that when I double check the Action Center again it show...

incident management

microsoft defender for endpoint

Response Actions

threat hunting

elieelkarkafi
Sep 21, 2023
JuliusPIV thank you!!

you can review the event viewer on the device itself by checking the below events.

You can also trigger a full scan from MDE as well as below and monitor the timeline logs.

JuliusPIV

Brass Contributor

Sep 21, 2023

Thanks again! We are indeed triggering the full scan from the M365 Security portal. In the http://Thanks%20again! We are indeed triggering the full scan from the M365 Security portal. If you check the first/original post I have screenshots showing that After scheduling it the Action Center window appears & confirms the scan is scheduled/queued. However, after a few minutes when revisiting the Action Center it shows the scan I have screenshots showing:

After triggering a scan, the Action Center window appears & confirms a scan is pending.
However, after a few minutes when revisiting the Action Center again it now shows the scan failed

Awesome tip regarding the Event logs. I'll do what I can remotely & see what comes back. Thanks again!

JuliusPIV

Brass Contributor

Oct 20, 2023

After much waiting another day or two this issue went away. Perhaps a scan was indeed running but with extremely limited access to the machine (physical or otherwise) it was challenging to verify this.