Hi Danila T, This is the log file after the removal of the virus: Microsoft Safety Scanner v1.353, (build 1.353.38.0) Started On Fri Oct 29 19:06:15 2021 Engine: 1.1.18700.4 Signatures: 1.353.38.0 MpGear: 1.1.16330.1 Run Mode: Interactive Graphical Mode Full Scan Results: ------------------ Threat Detected: VirTool:Win32/DefenderTamperingRestore and Removed! Action: Remove, Result: 0x00000000 regkeyvalue://hklm\software\microsoft\windows defender\\DisableAntiSpyware SigSeq: 0x0000055555C57273 Results Summary: ---------------- Found VirTool:Win32/DefenderTamperingRestore and Removed! Successfully Submitted MAPS Report Successfully Submitted Heartbeat Report Microsoft Safety Scanner Finished On Fri Oct 29 20:23:22 2021 Return code: 6 (0x6) I am afraid I didn’t take a screen shot at the time. Thanks for responding, Helter_Skelter