1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Windows defender 3004 error in event viewer

Discussion in 'Security and Privacy' started by Alicia J, 2006/04/06.

  1. 2006/04/06
    Alicia J Lifetime Subscription

    Alicia J Geek Member Thread Starter

    Joined:
    2002/01/07
    Messages:
    1,132
    Likes Received:
    1
    Event Type: Warning
    Event Source: WinDefend
    Event Category: None
    Event ID: 3004
    Date: 4/4/2006
    Time: 8:15:00 PM
    User: N/A
    Computer: TRIXIE
    Description:
    Windows Defender Real-Time Protection agent has detected potential malware.
    For more information please see the following:
    http://www.microsoft.com
    Scan ID: {E46C2977-66BD-458A-8D3A-03FE7332EFE7}
    User: TRIXIE\Alicia & Dianna
    Threat Name: Unknown
    Threat Id:
    Threat Severity:
    Threat Category:
    Path Found: driver:uphcleanhlp
    Threat Classification: Unknown
    Detection Type:

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


    Event Type: Warning
    Event Source: WinDefend
    Event Category: None
    Event ID: 3004
    Date: 4/4/2006
    Time: 5:10:49 PM
    User: N/A
    Computer: TRIXIE
    Description:
    Windows Defender Real-Time Protection agent has detected potential malware.
    For more information please see the following:
    http://www.microsoft.com
    Scan ID: {5383A366-01DE-460E-AF88-ECD81E307025}
    User: TRIXIE\Alicia & Dianna
    Threat Name: Unknown
    Threat Id:
    Threat Severity:
    Threat Category:
    Path Found: driver:WINIO;file:C:\WINDOWS\TEMP\WinIo.sys
    Threat Classification: Unknown
    Detection Type:

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


    I know what uphclean is but in the second error the path
    driver:WINIO;file:C:\WINDOWS\TEMP\WinIo.sys is not in my Windows\Temp
    I can't find winio.sys anywhere with a search. (Yes I have folder options view to show all files etc)

    Home Edition XP SP2

    Any ideas how to resolve that error?
     
  2. 2006/04/06
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,890
    Likes Received:
    387
    Alicia

    My take on this after a bit of Googling is that Widows Defender does not yet know whether or not these items constitute a threat or not, hence the warning. WD sends feedback if you have ticked the Spynet button (this may not be the exact name - I don't have WD on my desktop, but use it on the laptop) and based on a specific no. of positives the item is investigated fully and added to the definition files if appropriate. I have seen similar errors messages on my laptop.

    There is very limited info on Google re. WinIo.sys - it appears to be related to Visual Basic - there is no hit suggesting it is malware.

    I would not lose any sleep over it :)
     

  3. to hide this advert.

  4. 2006/04/06
    Alicia J Lifetime Subscription

    Alicia J Geek Member Thread Starter

    Joined:
    2002/01/07
    Messages:
    1,132
    Likes Received:
    1
    Thanks Pete.
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.