VirTool:Win32/DefenderTamperingRestore

[Helter_Skelter]

Hi,

I am wondering if it is OK to have Microsoft Defender in passive mode running occasional background scans. I ask this as I have recently had internet issues which I thought might have been caused by a Virus. A full KIS scanned had NO detections (KIS 21.3.10.391(g)) I downloaded the Microsoft Security Scanner and it Detected VirTool:Win32/DefenderTamperingRestore (with KIS disabled). Periodic scanning is currently set OFF.

I am running KIS on a Windows 10 Pro machine.

 

Advice Appreciated

[Danila T.]

Hello,

 

Do you know the file name and where it has been located?  Please post scren with detection.

[Helter_Skelter]

Hi Danila T,

This is the log file after the removal of the virus:
 

Microsoft Safety Scanner v1.353, (build 1.353.38.0)
Started On Fri Oct 29 19:06:15 2021

Engine: 1.1.18700.4
Signatures: 1.353.38.0
MpGear: 1.1.16330.1
Run Mode: Interactive Graphical Mode

Full Scan Results:
------------------
Threat Detected: VirTool:Win32/DefenderTamperingRestore and Removed!
  Action: Remove, Result: 0x00000000
    regkeyvalue://hklm\software\microsoft\windows defender\\DisableAntiSpyware
        SigSeq: 0x0000055555C57273

Results Summary:
----------------
Found VirTool:Win32/DefenderTamperingRestore and Removed!
Successfully Submitted MAPS Report
Successfully Submitted Heartbeat Report
Microsoft Safety Scanner Finished On Fri Oct 29 20:23:22 2021

Return code: 6 (0x6)

I am afraid I didn’t take a screen shot at the time.

Thanks for responding,

Helter_Skelter

[Danila T.]

Hello,

 

Thanks. This case is probably similar to those cases: https://answers.microsoft.com/en-us/protect/forum/all/how-to-remove-the/e68d7405-4610-49cb-b97f-69e83f603697?page=1

Try the solutions from this topic. You can also contact our support team: Consumer Support Contacts

[Helter_Skelter]

Hi Danila T,

 

I am wondering if it is OK to have Microsoft Defender in passive mode running occasional background scans (at the moment this is DISABLED).

I do not want to make changes to Microsoft Defender settings if they are going to clash with Kaspersky Internet Security.

Regards,

Helter_Skelter

 

P.S. I ran the Microsoft Safety Scanner (new download) and it reported NO DETECTIONS this time.