I received warning for Win32/Defendertamperingrestore everyday

Anonymous
2021-04-13T08:00:37+00:00

I downloaded a pivot animator 3 months earlier 

It also downloaded a AVG antivirus free trial version.i deleted the antivirus and the pivot animator.it turned off my windows defender.i backed it up by seeing a youtube video but after that i am getting this win32/defendertamperingrestore everyday i scan and remove it idk how to fix it

I even tried after clearing my protection history

Pls help fast

P.S my laptops working absolutly fine

[Original Title: Malware]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

50 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2021-07-11T18:43:15+00:00

    how to delete this?

    Was this answer helpful?

    0 comments
  2. Anonymous
    2021-07-11T18:49:52+00:00

    how to delete this?

    Was this answer helpful?

    0 comments
  3. Anonymous
    2021-07-11T18:50:36+00:00

    bruh pls help

    Was this answer helpful?

    0 comments
  4. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  5. Anonymous
    2021-07-11T23:07:15+00:00

    Hi Tunachn,

    I do not believe that "Vir Tool" is actually a "virus". I think it is just a notification that

    something within Defender is not as it should be.

    In your case, "DisableBehaviorMonitoring" is that which is wrong. As shown in your

    screenshot. I expect that you have already scanned for viruses, repeatedly. So other

    existing malware should not be present.

    You can correct BehaviorMonitoring, and check for other conditions that might cause

    "Vir Tool" to repeat, by using Windows PowerShell (Admin).

    Open PowerShell (Admin) by right-clicking "Start" and select it. In PowerShell, type this Cmdlet.

    Get-MpComputerStatus and hit <enter> You should see a list that looks like this...

    Image

    Compare this list to the one you that you just created. You will find that DisableBehaviorMonitoring

    will have the status of FALSE in your list. The only other item with status of FALSE should be "VirtualMachine".

    If you have any others with the status of FALSE, they will cause "Vir Tool" to repeat.

    To correct DisableBehaviorMonitoring, you will need to run another Cmdlet in PowerShell.

    Type Set-MpPreference -DisableBehaviorMonitoring $False and hit <enter>.

    If you found any others with the status of FALSE, they will need to be corrected also. Please respond

    for instructions for correcting them.

    To leave PowerShell type Exit <enter>.

    Restart your PC and access Defender again.

    Good luck, Glen

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments