To enable debug logging for the Virus Scan Engine:
Open the Registry Editor (regedit.exe).
Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TMFilter\Parameters.
Change the value of "DebugLogFlags" to "00003eff".
Perform the steps that led to the scanning issue you encountered.
Check TMFilter.log in %windir%.
To disable debug logging for the Virus Scan Engine:
Restore the value of "DebugLogFlags" to "00000000".
See also: