locked
Defender Full Scan on Windows 10 - millions of files scanned ? RRS feed

  • Question

  • Windows 10 version 1809.

    On this particular system there are two volumes configured. The C: volume has approximately 130K files on it and the other volume has approximately 200K files on it.

    When we run a Defender Full Scan, it takes approximately 24 hours to complete and Defender indicates that over 17 *million* files were scanned.  

    Why the discrepancy in the number of files on disk and the number of files that Defender reports that it scanned during the full scan?  There are no shares or other drives connected to the machine.  I also cleared the existing vss snapshot before running the scan.  

    Monday, April 29, 2019 2:24 PM

All replies

  • Windows Defender scans many items including files, folders, process and so on. So consider you have MSI file, in system it consider as one execution file but it has containers which let say it might have over 20 items inside it and let say for zip files, it will scan everything inside zip file.
    Friday, May 3, 2019 6:01 PM