Windows 10: Windows Defender Security Center Notifies - Virus and Threat Protection : unauthorized...

I have Windows 10 64 bit version 1803 in my Desktop PC. As I recollect from 9/10th December 2018 I am facing an unusual

problem which I am narrating below. I have already received more than a dozen such notifications from Windows Defender

and I am helplessly viewing those without any idea of what is wrong with my system.


Windows Defender Security Center says: "Virus & Threat Protectopn - Unauthorised changes blocked: -

Controlled folder access blocked C:\ Window\powershell.exe from making changes to the folder%de...\ windows Defender ..."

Another example:- "Unauthorized changes blocked:- Controlled folder access blocked C:\ProgramFile ...\vlc.exe from making changes to the folder%userprofile%\Documents".

I have received similar notifications relating to 'Chrome', 'Firefox', Utorrent etc.


I suspected some virus/malware infection and tried to utilize Windows Defender Offline scan but found that function is repeatedly failing to respond. I also found Power Shell and Command Prompt not responding appropriately.


I am a user of a computer and not a technician. Therefore, I would deem it a favour if detailed guidance is provided to me by

knowledgeable members.


I like to add that last windows update was installed on 7the Decb.2018. There was no Hardware change.

I understand that 'Event Viewer' logs must contain details of these but I am not capable to read and understand those.

So, please help me.

:)

 

Cannot turn on Windows Defender virus protection

I had the same sort of symptoms. In the Windows Security Center, under Virus and threat protection, it said "Your virus & threat protection is managed by your organization."





I note you mentioned the Registry Keys under HKLM/SOFTWARE/Microsoft/Windows Defender. Nice spotting, but it seems like there is another key that is causing the problem for some users.

Steps to a solution:

1. Press the Windows key and type "regedit"
   
2. On the regedit icon that appears, right-click and select Run as Administrator.
   
3. Navigate to the folder located at HKLM\SOFTWARE\Policies\Microsoft\Windows Defender (You can paste this into the address box at the top of the window, or navigate manually using the side directory structure)
   
4. In this folder, there are probably two keys. Right-click and Delete the DisableAntiSpyware key.
   
5. Exit regedit, and return to the Windows Defender settings screen (refresh it if necessary). Windows Defender should have the scan options available and working.
   

Solution adapted from here, with a much more detailed solution here.

 

Windows 10 Home - "Unauthorized changes blocked"

This answer fixed multiple "unauthorized changes to controlled folder" notifications I was getting. I hope it actually isn't still blocking things, and just not notifying.

 

Can not access Virus and Threat protection to run defender

Hello,

Open Group Policy snap-in by running gpedit.msc command.

Go to Computer Configuration > Administrative Templates > Windows Defender Security Center > Virus and threat protection.

Set 'Hide the Virus and threat protection area' setting to Not Configured.

Let us know if this helps!