Windows Defender full scan showing “Last scan not available” after completing with no threats found.

Sanjib Pradhan 0 Reputation points
2026-10-06T08:09:20.18+00:00

- Gathered details about Windows Defender quick scan and full scan behavior
- Checked whether any error message was displayed during the full scan
- Quick scan completes success
- Requested screenshot of the “Last scan not available” message
**- full scan completes successfully and shows “No threats found,” there may be no detected threats requiring action
**
**- message may indicate scan details are not being displayed rather than a scan failure
**
**- Tried to run another full scan and verify the result
**
- The result same after deice restart & full re-scan

Microsoft Security | Microsoft Defender | Other
0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-10-06T08:09:37.1+00:00

    If full scan completes successfully and shows No threats found, that indicates the scan itself finished. In Microsoft Defender Antivirus, scan completion can be confirmed by status sources such as Event Viewer, Defender portal reporting, or exported health data.

    A practical way to verify whether the scan truly completed on the device is to check Event Viewer for these Microsoft Defender Antivirus scan events:

    1. Event ID 1000 = scan started
    2. Event ID 1001 = scan finished
    3. Event ID 1002 = scan stopped before completion

    If the device shows 1001, the full scan completed successfully even if the Windows Security UI still shows “Last scan not available.” That points to the displayed scan details not reflecting the completed scan, rather than the scan failing.

    Also check whether the scan might have been interrupted by conditions that can stop or cancel scans, such as:

    • Device restart during or around the scan
    • Battery power during a scheduled full scan
    • Power state changes such as sleep, hibernate, or resume
    • Scan timeout for scheduled or MpCmdRun-initiated scans

    Since the same result appears after restart and another full scan, the next useful validation is:

    1. Open Event Viewer on the device.
    2. Review Microsoft Defender Antivirus scan events for 1000/1001/1002.
    3. If needed, also review System log restart events 6005, 6006, 6007, 6008 and power-related events 107, 42, 507, 506, 105 to rule out interruption.
    4. If available in the environment, check the Device health / Recent antivirus scan results view in Microsoft Defender reporting to confirm whether the latest full scan is marked Completed, Canceled, or Failed.

    For scan behavior differences, Windows Security supports Quick scan, Full scan, Custom scan, and Microsoft Defender Antivirus offline scan. A full scan checks every file and program on the device.


    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.