A message could not be virus scanned error code 0x0

If the client can't communicate with the WSUS computer, the scan fails. This issue can occur for several reasons, including:. Then check whether the client can access the ClientWebService virtual directory. Finally, check whether the client can access the SimpleAuthWebService virtual directory.

If the WSUS computer doesn't return the error, the issue is probably with an intermediate firewall or proxy. If any of these tests fails, check for name resolution issues on the client. Also verify the proxy settings on the client to make sure that they are configured correctly.

For more information, see the Scan failures due to proxy-related issues section. Finally, verify that the WSUS ports can be accessed. WSUS can be configured to use any of the following ports:. Port settings are configured when the software update point site system role is created. These port settings must be the same as the port settings that are used by the WSUS website. The following procedures show how to verify the port settings that are used by WSUS and the software update point.

After the ports are verified and configured correctly, you should check port connectivity from the client by running the following command:. This error suggests that firewall rules must be configured to enable communication for the WSUS Server ports. The device didn't onboard correctly. It will report to the portal, however the service may not appear as registered in SCCM or the registry. Onboarding process failed.

Normally, Microsoft Defender Antivirus will enter a special passive state if another real-time antimalware product is running properly on the device, and the device is reporting to Defender for Endpoint. Ensure real-time antimalware protection is running properly. Ensure the diagnostic data service is enabled. Ensure the device has Internet access, then run the entire offboarding process again.

Ensure the offboarding package hasn't expired. An error occurred with the Windows telemetry service during onboarding. Check for errors with the Windows telemetry service. Reboot the device. A unique identifier is used to represent each device that is reporting to the portal.

If the identifier doesn't persist, the same device might appear twice in the portal. Check registry permissions on the device to ensure the service can update the registry.

An error occurred with the Windows telemetry service during offboarding. Check for errors with the Windows diagnostic data service. Completion code: variable. The device has almost used its allocated quota of the current hour window.

It's about to be throttled. The device has low battery level and will contact the server less frequently. The device doesn't have low battery level and will contact the server as usual. The service failed to start. If this error persists, contact Support. The service was offboarded.

This caused service start-up failure. This is most likely because there are too many active event trace sessions. The service will retry in 1 minute. An error occurred on service startup while creating ETW session due to lack of resources.

The service started and is running, but won't report any sensor event until the ETW session is started. The service will try to start the session every minute. This event follows the previous event after successfully starting of the ETW session.

This means that events from this provider will not be reported. Failed to add a provider to ETW session. As a result, the provider events aren't reported. This event occurs when the client fails to update itself. This event is usually due to an interruption in network connectivity during an update.

The antimalware engine will attempt to load the last-known good set of definitions. Description: Microsoft Defender Antivirus has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures. This error can occur when the client encounters an error while trying to load the definitions, or if the file is corrupt. Microsoft Defender Antivirus will attempt to revert back to a known-good set of definitions. To troubleshoot this event: Restart the computer and try again.

Download the latest definitions from the Microsoft Security Intelligence site. Note: The size of the definitions file downloaded from the site can exceed 60 MB and should not be used as a long-term solution for updating definitions. The antimalware platform will load the last-known good antimalware engine and attempt to update. Description: Microsoft Defender Antivirus could not load antimalware engine because current platform version is not supported.

Microsoft Defender Antivirus will revert back to the last known-good engine and a platform update will be attempted. Description: Microsoft Defender Antivirus has encountered an error trying to update the platform. Download the latest platform to maintain up-to-date protection. Description: Microsoft Defender Antivirus will soon require a newer platform version to support future versions of the antimalware engine. Download the latest Microsoft Defender Antivirus platform to maintain the best level of protection available.

Description: Microsoft Defender Antivirus used Dynamic Signature Service to retrieve additional signatures to help protect your machine. User action: No action is necessary.

This event is reported when the Dynamic Signature Service successfully deletes out-of-date dynamic definitions. User action: Check your Internet connectivity settings. Description: Microsoft Defender Antivirus downloaded a clean file. Description: Microsoft Defender Antivirus has encountered an error trying to download a clean file. The Microsoft Defender Antivirus client encountered an error when using the Dynamic Signature Service to download the latest definitions to a specific threat.

This error is likely caused by a network connectivity issue. Description: Microsoft Defender Antivirus downloaded and configured offline antivirus to run on the next reboot. Description: Microsoft Defender Antivirus has encountered an error trying to download and configure offline antivirus.

Description: The support for your operating system will expire shortly. Running Microsoft Defender Antivirus on an out of support operating system is not an adequate solution to protect against threats. You must upgrade the operating system for continued support. Description: The support for your operating system has expired. Microsoft Defender Antivirus is no longer supported on your operating system, has stopped functioning, and is not protecting against malware threats.

Reason: The reason Microsoft Defender Antivirus real-time protection has restarted a feature. User action: You should restart the system then run a full scan because it's possible the system was not protected for some time. The Microsoft Defender Antivirus client's real-time protection feature encountered an error because one of the services failed to start. If it is followed by a event ID, the failure was temporary and the antimalware client recovered from the failure.

We recommend running a full system scan when you see this error. It is recommended that you run a full system scan to detect any items that may have been missed while this agent was down. User action: The real-time protection feature has restarted. If this event happens again, contact Microsoft Technical Support. Description: Microsoft Defender Antivirus real-time protection scanning for malware and other potentially unwanted software was enabled.

Description: Microsoft Defender Antivirus real-time protection scanning for malware and other potentially unwanted software was disabled. Description: Microsoft Defender Antivirus real-time protection feature configuration has changed. Description: Microsoft Defender Antivirus configuration has changed.

If this is an unexpected event, you should review the settings as this may be the result of malware. Description: Microsoft Defender Antivirus engine has been terminated due to an unexpected error. For antimalware, antivirus and spyware, at an elevated command prompt, type net stop msmpsvc , and then type net start msmpsvc to restart the antimalware engine.

If it fails in the same way, look up the error code by accessing the Microsoft Support Site and entering the error number in the Search box, and contact Microsoft Technical Support. User action: The Microsoft Defender Antivirus client engine stopped due to an unexpected error. To troubleshoot this event: Run the scan again. So, I would recommend you try the following methods.

Remove Office license files using the license removal tool , then open any Office app and try to activate. Please make sure your Office apps are up to date And you may refer to this article: Update history for Office for Mac. Was this reply helpful? Yes No. Sorry this didn't help. Thanks for your feedback.