Event ID 5005 — Real-Time Protection Availability

Applies To: Windows Server 2008

In order for Windows Defender to alert you when spyware or other potentially unwanted software is installed on a real-time basis, Real-Time Protection must be enabled and functioning correctly.

Event Details

Product: Windows Defender
ID: 5005
Source: Microsoft-Windows-Windows Defender
Version: 1.1
Symbolic Name: MALWAREPROTECTION_RTP_CHECKPOINT_CONFIGURED
Message: %1 Real-time Protection checkpoint configuration has changed.
%tCheckpoint:%b%3
%tConfiguration:%b%4

Resolve

This is a normal condition. No further action is required.

Real-Time Protection Availability

Windows Defender