virtool:win32/defendertamperingrestore from Microsoft Safety Scanner scan

Discussion in 'other anti-virus software' started by nine9s, Oct 22, 2020.

  1. nine9s

    nine9s Registered Member

    Joined:
    Feb 8, 2013
    Posts:
    309
    Location:
    USA
    I use Norton Security. Monthly I do scans with Malwarebytes and Emsisoft Emergency scanners and also do Norton's scan. None ever find anything.

    Today, for first time in probably a year or more, I ran Microsoft Safety Scanner for 64 bit.

    It had one detection, "virtool:win32/defendertamperingrestore" , and stated it removed it.

    I searched for it. There is not that much information. One search result pointed to a Microsoft support page:

    https://www.microsoft.com/en-us/wds...DefenderTamperingRestore&threatId=-2147225674

    Based on that page, this does not seem to by any kind of virus but just a setting in Microsoft Defender:

    "
    Summary
    This detection is for suboptimal configurations that may prevent Windows Defender Antivirus from functioning properly.

    If you see this detection, a suboptimal configuration was detected, and Windows Defender Antivirus will auto-heal by automatically resetting to more secure configurations.

    "

    That is a description from finding this with Defender. I did not scan with Defender but Microsoft Safety Scanner. I assume it is the same.

    I rescanned with all scanners. None found anything, including a re-download and re-run of Microsoft Safety Scanner.

    Should I worry about this? I could do a system image restore from an imagine done ~6 months ago to be extra safe, but would rather not if this detection is what is stated in that Summary and only a setting in Defender.
     
  2. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    17,002
    Location:
    UK
  3. nine9s

    nine9s Registered Member

    Joined:
    Feb 8, 2013
    Posts:
    309
    Location:
    USA
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.