| Event Id | 3002 |
| Source | Microsoft-Windows-Windows Defender |
| Description | %1 Real-Time Protection agent has encountered an error and failed to start. %tUser:%b%8\%9 %tAgent:%b%3 %tError Code:%b%4 %tError description:%b%5 |
| Event Information | According to Microsoft : Cause : This event is logged when real time protection agent has encountered and error and failed to start. Resolution : Enable Real-Time Protection To resolve this issue, enable Real-Time Protection (RTP). RTP helps to protect users by examining auto-start extensibility points (ASEPs) where spyware or other potentially unwanted software tends to install itself. Real-Time Protection must be enabled so that Windows Defender can automatically examine the ASEPs. Note : To perform these procedures, you must be a member of theAdministrators group, or you must have been delegated the appropriate authority. To enable Real-Time Protection: 1.ClickStart, point to All Programs, and then clickWindows Defender. 2.ClickTools, and then clickOptions. 3.Select theUse real-time protection (recommended) check box, and then clickSave. Verify : Real-Time Protection must be enabled so that Windows Defender can alert you in real time when spyware or other potentially unwanted software is installed. To perform these procedures, you must be a member of the Users group, or you must have been delegated the appropriate authority. To verify that Real-Time Protection is enabled: 1.ClickStart, point toAll Programs, and then click Windows Defender. 2.ClickTools, and then clickOptions. 3.Ensure that the Use real-time protection (recommended) check box is selected. 4.Close Windows Defender. |
| Reference Links | Event ID 3002 from Source Microsoft-Windows-Windows Defender |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.