Event ID 3002

karlsnooks · 24 Jul 2011

Why am I getting this event in my event logs?

Code:

Error    24-Jul-11 19:17:40    Microsoft Antimalware    3002    None

Log Name:      System
Source:        Microsoft Antimalware
Date:          24-Jul-11 19:17:40
Event ID:      3002
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      snooks-tosh
Description:
Microsoft Antimalware Real-Time Protection feature has encountered an error and failed.
     Feature: Behavior Monitoring
     Error Code: 0x80004005
     Error description: Unspecified error 
     Reason: The filter driver requires an up-to-date engine in order to function. 
        You must install the latest definition updates in order to enable real-time protection.

When I noticed this then I immediately ran Windows Update and MSE Update (from the update tab).

Still got the same error again.

MSE shows:

Jacee · 25 Jul 2011

What does MBam report? Have you flushed the DNS cache?

karlsnooks · 25 Jul 2011

mbam found nothing. work was at a coffee house with zero connectitivity problems. No dns flush performed.

My question is: Why am I getting that event entry?

Borg 386 · 26 Jul 2011

I found this discussion on it that may help you, looks like the poster got exactly the same message:

Filter driver error is appearing in the System Event Log - Microsoft Answers

karlsnooks · 26 Jul 2011

Borg 386 said:

I found this discussion on it that may help you, looks like the poster got exactly the same message:

Filter driver error is appearing in the System Event Log - Microsoft Answers

Many thanks. There was an answer there-not the one marked as ann answer by the "mvp moderator", but rather another one. Generally, I ignore the "answers" site because of the weakness of the mvp/moderator chosen answers. I've never understood why they insist of marking each thread as answered when quite frequently the thread has not be answered.

That aside, the problem is a false positive being reported by the Microsoft software. Problem related to the network inspection service which is not existant on xp systems which, consequently, do ot result in the false positive.

In other words, we can ignore the false event entry.

Thanks,
Karl

Borg 386 · 26 Jul 2011

Glad you got it sorted. I seem to remember something similar happening along those lines a while back...of course, my memory isn't what it used to be....and my memory isn't what it used to be.....

skbaltimore · 13 Mar 2012

karlsnooks said:

Borg 386 said:

I found this discussion on it that may help you, looks like the poster got exactly the same message:

Filter driver error is appearing in the System Event Log - Microsoft Answers

Many thanks. There was an answer there-not the one marked as ann answer by the "mvp moderator", but rather another one. Generally, I ignore the "answers" site because of the weakness of the mvp/moderator chosen answers. I've never understood why they insist of marking each thread as answered when quite frequently the thread has not be answered.

That aside, the problem is a false positive being reported by the Microsoft software. Problem related to the network inspection service which is not existant on xp systems which, consequently, do ot result in the false positive.

In other words, we can ignore the false event entry.

Thanks,
Karl

Thanks so much. I'm new to MSE, and that error message had been bugging me. It's good to hear it's just an annoying f/p, rather than an actual issue. I notice that upon booting, it takes a while for the tray icon to go from red x to green with the white check mark. But once it turns green, it says that MSE is active and the system is protected. Apparently, there's some little glitch when the computer first boots up, but apparently it's just a minor glitch, not a major problem.