Windows 10: VIRTOOL:Win32\DefenderTamperingRestore malware

Microsoft’s MSERT tool finds this malware on my PC.It says it has removed it but the Firewall-Router-Gateway finds an infected PC.This is known as VIRTOOL:Win32\DefenderTamperingRestore malware and I know of no way to remove it.Any assistance will be appreciated.

:)

 

Win32/DefenderTamperingRestore

Hi there.

Anybody can help me with how to clean my computer from this virus:
Win32/DefenderTamperingRestore

Usually, when I run MSERT.exe it says that this virus was eliminated. But I have some questions:

a) Is it a memory-resident malware?

b) Is it launched in my computer startup?

c) Or is it activated when I run some software. How can I know which software is launching it? I guess that MSERT must know.

d) Where it is located?

e) How can I delete it?

f) FINALLY.......IS IT DANGEROUS? (For example, Is my computer safe to use it with my credit card payments)

Regards

Hernán Covarrubias

Mobile: +569 9870 3539

Private mail: *** Email address is removed for privacy ***

 

Win32/DefenderTamperingRestore

Hello I am an independent advisor for the Microsoft community. I did a quick search and found that this isn't actually a virus, it's actually Windows Defender notifying you about your settings. Here is the page with more info:

https://www.microsoft.com/en-us/wdsi/threats/ma...

 

Win32/DefenderTamperingRestore caught by Windows Defender

Looks like Microsoft has updated the entry on their security site - this is a catch to reconfigure real-time detection if it has been disabled. Below is what is listed on MS's site now:

Summary

This detection is for suboptimal configurations that may prevent Windows Defender Antivirus from functioning properly.

If you see this detection, a suboptimal configuration was detected, and Windows Defender Antivirus will auto-heal by automatically resetting to more secure configurations.

https://www.microsoft.com/en-us/wds.../DefenderTamperingRestore&ThreatID=2147741622