Microsoft KB Archive/925545

= Event message when Windows Defender scans a computer: &quot;Event 3004 (MALWAREPROTECTION_RTP_MALWARE_DETECTED)&quot; =

Article ID: 925545

Article Last Modified on 3/29/2007

-

APPLIES TO


 * Windows Defender

-



SYMPTOMS
When Microsoft Windows Defender scans a computer for possible malicious third-party programs and other forms of malware, you may receive the following event message: Event 3004 (MALWAREPROTECTION_RTP_MALWARE_DETECTED)

Windows OneCare Live Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows OneCare Live can't undo changes that you allow.



CAUSE
This event message is created when the Real-Time Protection agent has detected changes in the system that could mean the presence of malicious third-party programs or other potentially unwanted software. The Real-Time Protection agent may also have detected third-party programs that could potentially be malicious programs. However, Windows Defender could not positively identify these programs.



RESOLUTION
If Windows Defender cannot positively identify a program as potentially malicious, you can report this program to Microsoft. Microsoft will determine whether the program is malicious. For more information about how to report potentially malicious programs, visit the following Microsoft Web site:

http://www.microsoft.com/athome/security/spyware/software/support/reportspyware.mspx

Additional query words: spyware antispyware trojan

Keywords: kbmsnqwestportal kbmsnpartnerportal kbdefenderrtwswept kbtshoot kbexpertisebeginner kbprb KB925545

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.