Microsoft Antimalware EventID 2011 flooding the System Event Log

We have several machines that the System Event Log is getting flooded with Microsoft Antimalware EventID 2011.  Here's a sample of the contents of the event:

Microsoft Antimalware used Dynamic Signature Service to discard obsolete signatures.
               Current Signature Version: 1.205.2016.0
               Signature Type: AntiVirus
               Current Engine Version: 1.1.12002.0
               Dynamic Signature Type: Signature update
               Persistence Path: C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\RtSigs\data\25ee3ed5dff6f08e429df29127afd044760e66c1
               Dynamic Signature Version: 0.0.0.0
               Dynamic Signature Compilation Timestamp: 1/1/1601 12:02:24 AM
               Removal Reason: Automatic
               Persistence Limit Type: Duration

These floods are causing errors with SCOM reporting and causing the machine to become unresponsive.  I haven't been able to find anything concrete about what causes these events or how to fix them.  Has anyone seen this before?

Thanks,

Ian

 
September 9th, 2015 6:14pm

Since it seems to have something to do with dynamic signatures, try turning off MAPS (formerly called SpyNet).
Free Windows Admin Tool Kit Click here and download it now
September 9th, 2015 7:25pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics