Windows 10: Device Security

Defender says it has identified a threat. I tell it "Remove", and it tells me it has "removed the threat from quarantine and/or restored it".

When I click on Detected by Microsoft Defender Antivirus, it shows me this:

"VirTool:Win32/DefenderTamperingRestore
Detected by Microsoft Defender Antivirus
Aliases: No associated aliases

Summary

This detection is for suboptimal configurations that may prevent Windows Defender Antivirus from functioning properly.

If you see this detection, a suboptimal configuration was detected, and Windows Defender Antivirus will auto-heal by automatically resetting to more secure configurations."

There is no more information that I can find about what the threat is/was, if it's gone or still there, and how to avoid it in future.

HELP!!

:)

 

Corporate Security Solution

That made me so facepalm. Some people have absolutely no clue. I hope they don't take you for granted with all this you're doing for them.

SonicWall is a good security product, so Mindweaver's suggestion sounds like a good one and should make for a rather bigger baby step. Let's hope they take it.

 

Microsoft Edge TLS Security

After trying everything (not a lot of steps) listed in the Microsoft Edge support site, I did a wider search and found this very simple youtube video that fixed it immediately:

For those who prefer not to click links the steps are simple:

1. Click in the Cortana search bar next to the Win 10 Start button

2. Type internet options

3. Select internet options (control panel) from the list

4. Click on the advanced tab

5. Scroll down to the security section

6. Make sure the following are all clicked:
Use SSL 3.0
Use TLS 1.0
Use TLS 1.1
Use TLS 1.2

7. Click apply

8. Refresh the page that was giving the error and it should now connect.

Hope this helps, it was a 30 second fix after hours of pounding my head against the error with the Support site suggestions.

 

Security Device Not Recognized

Ob build 10527:

On my login screen I had 4 icons:

• Password
• Security Device
• Security Device
• PIN

The Security Device (#2) when clicked shows "Security Device Not Recognized". It also shows up as the default. The other Security Device (#3) is a Virtual Smart Card and it functions correctly. As does the Password and PIN.

I used Tpmvscmgr to destroy the virtual smart card instance #0, and I further attempted to destroy any other instances but none existed.

Now I have:

• Password
• Security Device
• PIN

The Security Device #2 still has the same error.

In Device Manager I only have 1 Security Device, TPM 2.0, which is functioning correctly (Bitlocker etc).

How do I remove or repair this bad security device on my sign-in screen?