Moved byStephen BootsMVP, ModeratorFriday, January 16, 2009 4:30 PMfrom antivirus (Moved from Windows Live OneCare Anti-Virus to Windows Live OneCare General)
I've changed your post to General Discussion from a Question and will be moving it to the General topic folder. You may notice that I've noted that the reason for this is that it is an unanswerable question.
This information is not published and since OneCare is a product on the path to retirement, there are no developers lurking in the forums to provide you with this information. OneCare isn't designed to be monitored in this way. I wouldn't be surprised in many of the problems are not logged as Events. On the other hand, OneCare has been known to log an awful lot of benign data as Events.
My recommendation would be for you to create the scenarios that you want to monitor via the events and see what OneCare logs. Remove the network connection, for example, and you will see the error logged as it tried to reach the server for a check. Leave it without a connection for 14 days (or set the clock ahead) and you'll see the error condition for out of date signatures and rules. Set the system clock completely wrong by years, reboot the PC and OneCare will fail to start. Etc.
-steveMicrosoft MVP Windows Live / Windows Live OneCare Forum Moderator