Description of Microsoft Windows Defender (Beta 2) configuration registry subkeys (914459)


The information in this article applies to:

  • Windows Defender (Beta 2)

INTRODUCTION

In Microsoft Windows Defender (Beta 2), there are configuration registry subkeys that you can examine to determine things about Microsoft Windows Defender.

MORE INFORMATION

In the following registry subkey, you can examine the DisableAntiSpyware registry entry to detect whether Windows Defender is enabled:

HKLM\Software\Microsoft\Windows Defender\DisableAntiSpyware

If the REG_DWORD value for this entry is set to 0, Windows Defender is enabled. If the REG_DWORD value for this entry is set to 1, Windows Defender is disabled.

Note By default, this value is not set in the registry.

In the following registry subkey, you can examine the ASSignatureVersion registry entry to determine the signature update version of Windows Defender:

HKLM\Software\Microsoft\Windows Defender\Signature Updates\ASSignatureVersion



In the following registry subkey, you can examine the LastScanRun registry entry to determine the last time that a Windows Defender scan was performed:

HKLM\Software\Microsoft\Windows Defender\Scan\LastScanRun

In this registry entry, the time of the last scan appears as a REG_BINARY value. The time is listed in Coordinated Universal Time (UTC). To see this time in a more readable form, see the main page of the Windows Defender client.

REFERENCES

Modification Type:MajorLast Reviewed:3/15/2006
Keywords:kbinfo KB914459 kbAudDeveloper
©2004 Microsoft Corporation. All rights reserved.