Share via

Event ID 3003 — Real-Time Protection Availability

  • Article

Applies To: Windows Server 2008 R2

In order for Windows Defender to alert you when spyware or other potentially unwanted software is installed on a real-time basis, Real-Time Protection must be enabled and functioning correctly.

Event Details

Product: Windows Operating System
ID: 3003
Source: Microsoft-Windows-Windows Defender
Version: 6.1
Symbolic Name: MALWAREPROTECTION_RTP_CHECKPOINT_FAILURE
Message: %1 Real-Time Protection checkpoint has encountered an error and failed to start.
%tUser:%b%8\%9
%tCheckpoint ID:%b%3
%tError Code:%b%4
%tError description:%b%5

Resolve

Enable Real-Time Protection

To resolve this issue, enable Real-Time Protection (RTP). RTP helps to protect users by examining auto-start extensibility points (ASEPs) where spyware or other potentially unwanted software tends to install itself. Real-Time Protection must be enabled so that Windows Defender can automatically examine the ASEPs.

To perform these procedures, you must be a member of the Administrators group, or you must have been delegated the appropriate authority.

To enable Real-Time Protection:

  1. Click Start, point to All Programs, and then click Windows Defender.
  2. Click Tools, and then click Options.
  3. Select the Use real-time protection (recommended) check box, and then click Save.

Verify

Real-Time Protection must be enabled so that Windows Defender can alert you in real time when spyware or other potentially unwanted software is installed.

To perform these procedures, you must be a member of the Users group, or you must have been delegated the appropriate authority.

To verify that Real-Time Protection is enabled:

  1. Click Start, point to All Programs, and then click Windows Defender.
  2. Click Tools, and then click Options.
  3. Ensure that the Use real-time protection (recommended) check box is selected.
  4. Close Windows Defender.

Real-Time Protection Availability

Core Security