- <Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft Antimalware" />
<EventID Qualifiers="0">2001</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2016-11-01T09:12:35.000000000Z" />
<EventRecordID>144752</EventRecordID>
<Channel>System</Channel>
<Computer>user</Computer>
<Security />
</System>
- <EventData>
<Data>%%860</Data>
<Data>4.10.205.0</Data>
<Data />
<Data>1.231.821.0</Data>
<Data>7</Data>
<Data>%%859</Data>
<Data />
<Data>NT AUTHORITY</Data>
<Data>SYSTEM</Data>
<Data>S-1-5-18</Data>
<Data>1</Data>
<Data>%%800</Data>
<Data>1</Data>
<Data>%%803</Data>
<Data />
<Data>1.1.13202.0</Data>
<Data>0x80072efe</Data>
<Data>The connection with the server was terminated abnormally</Data>
<Data>1</Data>
<Data>%%852</Data>
<Data>
http://www.microsoft.com</Data>
</EventData>
</Event>
or should it be changed/corrected to an update site from Microsoft?
