On-demand scan events and log details

McAfee MOVE AntiVirus generates various alerts around on-demand scan. You can view the ODS statuses and event logs in McAfee ePO and client systems.

The log files for on-demand and on-access scans are available in the installation directory.

In the client log file, you can search for terms like ODS: start scan and ODS: scan complete to know the status on-demand scan.

(Multi-Platform only) You can also view the ODS status from the local system's Windows Event Log on the client system. (Event: On-Demand Scan Started on winvistax64mp.moveauto.com using engine version 5600.1067 and dat version 7203.0000)

McAfee MOVE AntiVirus generates alerts for on-demand scan . These alerts can be displayed in any of three locations:

  • The local system's Windows Event Log
  • The McAfee ePO Threat Event Log
  • The local system as a McAfee notification area pop-up menu
Table 1: Server on-demand scan events (Multi-Platform)
Event ID Event message
36984 On-demand scan started.
36985 On-demand scan completed.
36986 On-demand scan terminated. Scan time limit reached.
36987 On-demand scan terminated. Scan disabled in policy.
36988 On-demand scan terminated. Exceeded maximum number of concurrent scans.
36989 High on-demand scan terminated. Scan failure on client.
36990 High on-demand scan terminated. Unexpected termination.
37009 Threat detected.
Table 2: Server on-demand scan events (Agentless)
Event ID Event message
37055 On-demand scan started.
37056 On-demand scan completed.
37057 On-demand scan found malware.
37058 On-demand scan failed to start.
37059 On-demand scan terminated. Scan time limit reached.
37060 On-demand scan terminated. Scan target powered off.
37061 On-demand scan terminated. Scan disabled in policy.
37062 On-demand scan resumed.
37076 Malware detected and successfully deleted.