Article ID: 925545
Article Last Modified on 3/29/2007
APPLIES TO
- Windows Defender
SYMPTOMS
When Microsoft Windows Defender scans a computer for possible malicious third-party programs and other forms of malware, you may receive the following event message:
Event 3004 (MALWAREPROTECTION_RTP_MALWARE_DETECTED)
Windows OneCare Live Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows OneCare Live can't undo changes that you allow.
CAUSE
This event message is created when the Real-Time Protection agent has detected changes in the system that could mean the presence of malicious third-party programs or other potentially unwanted software. The Real-Time Protection agent may also have detected third-party programs that could potentially be malicious programs. However, Windows Defender could not positively identify these programs.
RESOLUTION
If Windows Defender cannot positively identify a program as potentially malicious, you can report this program to Microsoft. Microsoft will determine whether the program is malicious. For more information about how to report potentially malicious programs, visit the following Microsoft Web site:
Additional query words: spyware antispyware trojan
Keywords: kbmsnqwestportal kbmsnpartnerportal kbdefenderrtwswept kbtshoot kbexpertisebeginner kbprb KB925545
