Windows 10: Virus found on laptop- tampering with windows defender can someone look through my FSRT log

I posted yesterday about running MSS and how the detection during scanning jumped from 6 to 20 which was too high and suspicious and people that replied kept saying that if nothing was found then it is okay but i found it weird. I ran it again today and it detected VirTool:Win32/DefenderTampering. I don't know where this has come from as i haven't downloaded anything from the internet i haven't run anything in powershell or command prompt so it suddenly popped out and idk where from.I have run FSRT and got the addition.txt. and FRST.txt: FRSTresult.zipcan someone look through it and see if the

:)

 

windows defender tamper protection

Hi, i am logged into my windows 11 laptop as local admin(there is only one account set up) but still can't switch off windows defender tamper protection. It says setting is managed by admin

So far i have taken following steps

- updated all windows updates available and restarted

- checked if any work or school account is not associated

Please advise

thanks

 

Microsoft Defender Antivirus - Tamper Protection

We use Windows 11 with Microsoft Defender Antivirus and tamper protection enabled. During a penetest we found out, that Microsoft Defender Antivirus can be easily disabled by installing a third Party antivirus solution, even tamper protection is enabled. Of course, local admin rights were required, but we were very surprised, that tamper protection can be so easily levered out.

We think this is a serious security issue and opened allready two cases by MS, but never got any response.

Has somenone an idea or suggestion, how to solve this issue with tamper protection?

 

Defender Tamper Protection/1903

Moderators: This thread deals with Defender Tamper Protection setting and 1903. If this would be better served in a different location, please feel free to move the post.

Just wondering if anyone who installed 1903 is having any unusual issue with Defender's Tamper Protection.
Here's the blow-by-blow.....

1. Friend and I were running 1809 and installed 1903 via Update Assistant on Tuesday, May 21st. No issues and Defender Tamper Protection was on (default setting).
2. Two days later, the 23rd, friend gets alert that Tamper Protection is off. She turned it on and it seems to be holding.
3. Today, I get the alert Tamper Protection is off and I turned it on. So far, it's holding.

I have no idea why Tamper Protection would turn off. Both computers are clean -- no viruses, trojans, malware or adware. We do not mess around in the registry and there is absolutely no third-party antivirus on either machine.

For now, I'm taking a wait-and-see if Tamper Protection turns off again. I don't know if it's a 1903 bug or not. Any ideas or suggestions would be appreciated.