Event ID 3003

[Guest]

Sometimes I see on the Application Event Viewer the following error:

Source: WinDefendRtp
Event ID: 3003
Type: Error

Windows Defender Real-Time Protection checkpoint has encountered an error
and failed to start.
User:
Checkpoint ID:
Error Code: 0x8000ffff
Error description: Catastrophic failure

Any ideas?
Thanks.

 

[Guest]

Hello wli2k2,

Uncheck "System Configuration" in the Windows Defender Real-Time protection
options under "Tools - General Settings".

Let us know how it works ºut.

Also, provide info about your PC.
http://support.microsoft.com/kb/555375

 

[Guest]

Read your response about above error in Win Defender to uncheck System
configuration. I'm having same error which just started showing in event
viewer. I've had Defender installed about a year with no problems. There
are two User Accounts and the error source report references the name of one
user. I've run full scan and Win Defender's main page states all is fine &
normal and scans daily. I ran a Registry clean-up as well. Would the System
Configuration need to be unchecked permanently? Do we know if that works?
I've gone everywhere online I can think of to find out about this type error
with no results. Thanks

 

[Bill Sanderson MVP]

I would sit tight for a bit. Turning off the protection simply makes the
situation silent. Leaving the service turned on elicits the error, and,
presumably, the error means that the protection isn't there after the error
occurs, but at least it is a reminder that there is a problem that should
have a solution.

And I don't have that solution at this point. I guess one thing to do would
be a repair reinstall of Windows Defender--that can't hurt--but I don't know
that it will help.

Start, control panel, add or remove programs, Windows Defender, click here
for support information, repair.


--

 

[Guest]

Thanks, my sentiments also. I'm still searching around my system to extent
of my knowledge, but can't find anything unusual that would cause this
reported error. I'm considering a System Restore at this point.

 

[Bill Sanderson MVP]

I see in the other thread that you may go the support call route, rather
than system restore. I like that choice better, I think, and I'd love to
hear how it turns out.

--

 

[Guest]

I'll post the results after talking to Microsoft support on this issue.
Hopefully it won't be a long waiting period getting through.

 

[Guest]

I spoke to Windows Security support 1-866-727-2338 regarding Error 3003, Code
800x7005 WindefendRT. Altho issue I'm having not same as shown on another
thread with same error #'s, Microsoft is aware of this reported error and a
update and/or a Windows Defender revision is in the works which will include
a fix. Possible cause is a User logging off/shutting down while Defender is
updating. Error does not appear to acutally cause any malfunction of
Defender's scanning process.

 

[Bill Sanderson MVP]

Interesting--thanks! Given that possible cause, if you want to clear it
away, here are some things you might want to try:

1) Properties of My Computer, automatic updates, set to OFF, then restart.

Visit WindowsUpdate and do an express scan and apply all offered updates.

Go back to the above location and set automatic updates back to the previous
setting--presumably automatic.

2) consider applying this patch:

http://support.microsoft.com/kb/927891/

3) If definitions are not current--i.e. there's any difficulty updating,
I'd blow definitions away and go to WindowsUpdate to reinstate them:

At a command prompt in the install folder for Windows Defender

mpcmdrun -RemoveDefinitions -All

Then visit WindowsUpdate, do an express scan, and apply all offered patches
which should include definitions.

My first two suggestions both relate to an issue where any .MSI based
installs result in high CPU usage--enough to make the machine quite
difficult to use for some time. I'm not sure this is related to your
report, but because PSS mentioned definition installation as part of a
possible cause, I think it could be.

In some of the threads related to this error, the error messages seem to
indicate that one of the Defender services crashes. If that's the case, you
would be missing protection. masacui.exe and msmpeng.exe should be running,
in task manager.

--

 

[Guest]

You gave me lot of good data to review. Thanks, I will check to see if all
updates have gone through. Both processes you mentioned show in Task
Manager. I recently had Defender update that went through ok.