

Though the entire process isn't displayed, the clues to this are the following 2 lines in your first log above. Near the end of the scanning process around 95% complete, the Microsoft scanners all perform a MAPS (Microsoft Active Protection Service) request via internet to the the Microsoft cloud servers in order to upload their initial findings and request confirmation that these findings are either truly malware or instead possible false positive detections or incomplete fragments of inactive malware.

In many cases these specific items have been found in the past to be related to malware, but they are all really just small fragments that have matched signatures, but aren't yet truly confirmed as the specific malware that might include them. The "Files Infected" count displayed on the Microsoft Safety Scanner, scan in progress screen or any of their other security products for that matter, is actually just a preliminary status indication that there are items which may contain malware. To truly answer your question, you need to understand how the Microsoft security apps actually operate, since that's part of why this sort of situation can be confusing to those who don't. Successfully Submitted MAPS Report Successfully Submitted Heartbeat Report Microsoft Safety Scanner Finished On Mon Mar 22 07:23:17 2021 Return code: 0 (0x0) This is the log from same machine in the photo - Microsoft Safety Scanner v1.333, (build 1.333.999.0) Started On Mon Mar 22 00:56:11 2021 Engine: 0.7 Signatures: 1.333.999.0 MpGear: 0.1 Run Mode: Interactive Graphical Mode Results Summary: - No infection found.

Sentinel One didn't detect anything and we are also running an Acronis CyberProtect on-demand A/V which is so far nothing finding anything either. This occurred on all 8 servers at one site we tried it on last night ! : /api/attachments/8-39.png?platform=QnA Wondering what cause of this behaviour is. However, when it completed the full scan, the gui and the logs show nothing found. We were running the March 17/21 MSERT 1.333.999.0 on a few servers and could see the detection count climbing and got as high as 25-30 items in some cases.
