View Microsoft Security Essentials Logs

Question

I have Windows 7 with Security Essentials as anti-virus program.

Recently I plugged in a flash drive and SE quarantined some important files.

I tried Restore option, but failed with some error.

Now I need to at least find the names of the affected files. Is there any way I can view it's log files?

Answer 1

From what i can tell, and from MS's own knowledge base - MSSE's logs are stored in C:\ProgramData\Microsoft\Microsoft Antimalware\Support. Digging a bit, i found that they seem to be stored in a text file called MPLog--.

There's a LOT of logs there, so you may want to do a search for the word quarantine.

Here's an example of a quarantined entry on mine

2012-05-11T11:07:38.022Z DETECTIONEVENT Worm:Win32/Autorun!inf file:D:\autorun.inf;
2012-05-11T11:07:38.092Z DETECTION_ADD Worm:Win32/Autorun!inf file:D:\autorun.inf
Begin Resource Scan
Scan ID:{1E60AF65-9582-446B-AF42-52A7F54D90FF}
Scan Source:6
Start Time:‎05‎-‎11‎-‎2012 19:07:42
End Time:‎05‎-‎11‎-‎2012 19:07:42
Explicit resource to scan
Resource Schema:file
Resource Path:D:\autorun.inf
Result Count:1
Threat Name:Worm:Win32/Autorun!inf
ID:2147597307
Severity:5
Number of Resources:1
Resource Schema:file
Resource Path:D:\autorun.inf
Extended Info:209085274001943
End Scan
***********************************************************

*