I received warning for Win32/Defendertamperingrestore everyday

Hi Helpmefastt

I am Dave, an Independent Advisor, I will help you with this . . .

You should run a scan with the free version of MalwareBytes to make sure your system is clean

https://www.malwarebytes.com/

Also, Microsoft indicate that Defender will recover form this problem by itself, that there is nothing further you need to do

________________________________________________________

Standard Disclaimer This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

are u sure?

in how much time will it be healed?

thx BTW

Hi Helpmefastt

Yes, here is what Microsoft have to say about that win32/defendertamperingrestore on their website:

https://www.microsoft.com/en-us/wdsi/threats/ma...

i did a offline scan with microsoft defender now the same virus is affecting- regkeyvalue: hklm\software\policies\microsoft\windows defender\real-time protection\DisableBehaviorMonitoring

and it affected-regkeyvalue: hklm\software\policies\microsoft\windows defender\DisableAntiSpyware

too 

pls help BTW u didnt tell in how much time it auto heals

and my offline scan is showing the wrong date and time

am rlly worried PLS HELP!!!

Hi Helpmefastt

Click your Start Button, then just type cmd

On the resulting list, right click Command Prompt and select 'run as Administrator'

Paste each of these commands into Command one at a time and press Enter, wait for each command to complete, before running the next command, if you receive an error on any command, ignore that and continue to the next command . . .

reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies" /f

reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\real-time protection\DisableBehaviorMonitoring" /f

reg delete "HKLM\Software\Microsoft\WindowsSelfHost" /f

reg delete "HKLM\Software\Policies" /f

reg delete "HKLM\Software\WOW6432Node\Microsoft\Policies" /f

reg delete "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies" /f

reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware

reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies" /f

reg delete "HKCU\Software\Microsoft\WindowsSelfHost" /f

reg delete "HKCU\Software\Policies" /f

reg delete "HKLM\Software\Microsoft\Policies" /f

Then, close Command Prompt and restart (not shut down) your PC . . .