Compactor icon indicating copy to clipboard operation
Compactor copied to clipboard

Windows Defender history is broken after compression

Open Marocco2 opened this issue 3 years ago • 3 comments

After a restart, Windows Defender history will appear blank and non functional. I did recover this in the past but I don't remember the exact steps and what files are involved.

I'll update the issue if I will find a solution

Marocco2 avatar Dec 06 '21 16:12 Marocco2

Seems like corruption takes place when you're going to compress ProgramData\Microsoft\Windows Defender

Restore Defender logging functionality is a mess. I would suggest add this path to blacklist

Marocco2 avatar Dec 06 '21 23:12 Marocco2

Found the culprit: compressing C:\ProgramData\Microsoft\Windows Defender\Scans\mpenginedb.db would lead into corruption of history log

Marocco2 avatar Dec 10 '21 23:12 Marocco2

Given I'm gaining exclusive locks on these files I'm surprised embedded db libraries continue to have issues. Perhaps I should also be setting share_mode.

Either way I'm going to add .db, .db-shm, and .db-wal to the default excluded file types.

Freaky avatar Dec 24 '22 14:12 Freaky