We have several machines that the System Event Log is getting flooded with Microsoft Antimalware EventID 2011. Here's a sample of the contents of the event:
Microsoft Antimalware used Dynamic Signature Service to discard obsolete signatures.
Current Signature Version: 1.205.2016.0
Signature Type: AntiVirus
Current Engine Version: 1.1.12002.0
Dynamic Signature Type: Signature update
Persistence Path: C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\RtSigs\data\25ee3ed5dff6f08e429df29127afd044760e66c1
Dynamic Signature Version: 0.0.0.0
Dynamic Signature Compilation Timestamp: 1/1/1601 12:02:24 AM
Removal Reason: Automatic
Persistence Limit Type: Duration
These floods are causing errors with SCOM reporting and causing the machine to become unresponsive. I haven't been able to find anything concrete about what causes these events or how to fix them. Has anyone seen this before?
Thanks,
Ian