Windows Defender and IIS



Not sure if this is right group, but...

I have IIS installed on my PC but I had it stopped and set to manual start.
The other day I noticed I had recent IIS log files on my PC. Containing
folder scans for various folders and executables (all thankfully 404'd). The
originating IP was my own computer. So now I'm scared I have some
spyware/virus, but all scans are negative.

A bit of reseasrch (first stopping and disabling IIS in services cpl and
waiting a day) shows in event log that shortly after Windows Defender
finishes a system scan (like seconds after), I see a DCOM error relating to
the fact that IIS cannot be started due to it being disabled.

Is Windows defender starting IIS as part of its programming? Or do I REALLY
have a big problem?

thanks in advance


Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads