Share via

Event ID 3002 — Real-Time Protection Availability

  • Article

Applies To: Windows Server 2008

In order for Windows Defender to alert you when spyware or other potentially unwanted software is installed on a real-time basis, Real-Time Protection must be enabled and functioning correctly.

Event Details

Product: Windows Defender
ID: 3002
Source: Microsoft-Windows-Windows Defender
Version: 1.1
Symbolic Name: MALWAREPROTECTION_RTP_AGENT_FAILURE
Message: %1 Real-Time Protection agent has encountered an error and failed to start.
%tUser:%b%8\%9
%tAgent:%b%3
%tError Code:%b%4
%tError description:%b%5

Resolve

Enable Real-Time Protection

To resolve this issue, enable Real-Time Protection (RTP). RTP helps to protect users by examining auto-start extensibility points (ASEPs) where spyware or other potentially unwanted software tends to install itself. Real-Time Protection must be enabled so that Windows Defender can automatically examine the ASEPs.

To perform these procedures, you must be a member of the Administrators group, or you must have been delegated the appropriate authority.

To enable Real-Time Protection:

  1. Click Start, point to All Programs, and then click Windows Defender.
  2. Click Tools, and then click Options.
  3. Select the Use real-time protection (recommended) check box, and then click Save.

Verify

Real-Time Protection must be enabled so that Windows Defender can alert you in real time when spyware or other potentially unwanted software is installed.

To perform these procedures, you must be a member of the Users group, or you must have been delegated the appropriate authority.

To verify that Real-Time Protection is enabled:

  1. Click Start, point to All Programs, and then click Windows Defender.
  2. Click Tools, and then click Options.
  3. Ensure that the Use real-time protection (recommended) check box is selected.
  4. Close Windows Defender.

Real-Time Protection Availability

Windows Defender