Antimalware Definitions

Microsoft.FEP.SecurityRootCause.AntimalwareDefinitions.AntimalwareDefinitions.Monitor (DependencyMonitor)

This monitor detects whether there is a valid definitions file. If the definitions file is missing or corrupt, the monitor will enter a Critical state.

Knowledge Base article:

Summary

Up-to-date definitions help ensure that the computer is protected against the most recent malware threats.

Causes

The most common cause is a missing definitions file after a client installation that failed to update properly.

Resolutions

Verify that WSUS is running and that the client computer has connectivity to Windows Update. Then, update antimalware definitions on the client computer.

Element properties:

Target	Microsoft.FEP.SecurityRootCause.AntimalwareDefinitions
Parent Monitor	System.Health.SecurityState
Algorithm	WorstOf
Source Monitor	Microsoft.FEP.ProtectedServer.AntimalwareDefinitions.Monitor
Relationship	Microsoft.FEP.AntimalwareDefinitionsReferencesProtectedServer
Category	Custom
Enabled	True
Alert Generate	False
Alert Auto Resolve	False
Remotable	True
Accessibility	Public

Source Code:

<DependencyMonitor ID="Microsoft.FEP.SecurityRootCause.AntimalwareDefinitions.AntimalwareDefinitions.Monitor" Accessibility="Public" Enabled="true" Target="FEPLibrary!Microsoft.FEP.SecurityRootCause.AntimalwareDefinitions" ParentMonitorID="Health!System.Health.SecurityState" Remotable="true" Priority="Normal" RelationshipType="FEPLibrary!Microsoft.FEP.AntimalwareDefinitionsReferencesProtectedServer" MemberMonitor="Microsoft.FEP.ProtectedServer.AntimalwareDefinitions.Monitor">

  <Category>Custom</Category>

  <Algorithm>WorstOf</Algorithm>

  <MemberUnAvailable>Error</MemberUnAvailable>

</DependencyMonitor>