Please can you tell me, does this PlatformRollbackMethod event look like it’s just a normal Event Viewer entry?
—–
Microsoft Defender Antivirus Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware.
Old value: DefaultDiagnosticsPlatformRollbackMethod = 0x0
New value: HKLMSOFTWAREMicrosoftWindows DefenderDiagnosticsPlatformRollbackMethod = 0x3
Event ID 5007
Source: Windows Defender
User: System
Information
—–
OS= win10 21h2
19044.1348
I’ve recently (1 month) been seeing this “PlatformRollbackMethod” event about once or twice a day, sometimes the values are switched.
It was suggested I post in this forum, after I posted here:
https://www.bleepingcomputer.com/forums/t/764720/unusual-windows-defender-event-platformrollbackmethod/
There are no symptoms or error messages. MBAM and Defender Full are clear.
I’m reluctant to download and run farbar, at this point, it’s probably overkill. I’m just wondering if this is a something-and-nothing event.
Would my query be better in the Anti-Virus software forum?
Have you seen this event appearing recently?
Many thanks.
