Lemonde
  • Lemonde
  • 100% (Exalted)
  • Advanced Member Topic Starter
4 years ago
What does this mean - is it Windows Defender, Security Essentials, or something else?


Log Name: System
Source: Microsoft Antimalware
Date: 16/06/2020 17:40:40
Event ID: 3002
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: %computername%
Description:
Microsoft Antimalware Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x80004005
Error description: Unspecified error
Reason: The filter driver skipped scanning items and is in pass through mode. This may be due to low resource conditions.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft Antimalware" />
<EventID Qualifiers="0">3002</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-06-16T16:40:40.000000000Z" />
<EventRecordID>24341</EventRecordID>
<Channel>System</Channel>
<Computer>%computername%</Computer>
<Security />
</System>
<EventData>
<Data>%%860</Data>
<Data>4.10.209.0</Data>
<Data>%%834</Data>
<Data>%%838</Data>
<Data>0x80004005</Data>
<Data>Unspecified error </Data>
<Data>3</Data>
</EventData>
</Event>

Sponsor

Want to thank us? Use: Patreon or PayPal or Bitcoins: bc1q4whppe29dw77rm4kv4pln0gqae4yjnxly0dny0hky6yhnafukzjsyrsqhk

All opinions expressed within these pages are sent in by members of the public or by our staff in their spare time, and as such do not represent any opinion held by sircles.net Ltd or their partners.


sirclesadmin
4 years ago
Run services.msc as an administrator

Stop the Microsoft Antimalware Service (MsMpSvc)

Start an elevated command prompt (Run CMD as administrator)

Copy and paste in:

cd \
cd C:\program files\Microsoft Security Client\
Mpcmdrun -RemoveDefinitions


See if your problem is resolved

If you are seeing this on a server, you can perform the first step above and then rename Definitions Update in C:\ProgramData\Microsoft\Microsoft Antimalware\ and start the service once more.
sirclesadmin
4 years ago
This is a diagnostic message that is not reporting an error as such. If this occurring when your PC is changing states - i.e. entering or waking from sleep - then it is often due to some components becoming available before others which cause various failure messages as detection comes online before application.

Unless you are actually encountering a problem, this message is likely to be a false detection of a problem.