Virtool:Win32\DefenderTamperingRestore keeps coming back , we are unaware from where the issue is coming.

[Jens Loncke]

Hello,We are having some computers who are getting VirTool:Win32/DefenderTamperingRestore defender alert. The alert indicates a change in the registry something to do with "DisableAntiSpyware" We know that this alert is not malware, but it's pretty anoying that alot of computers are getting this alert but we don't know where the root cause is.We can clear the alert / resolve it, but after a reboot / certain time the alert is coming back. And it's unclear what is causing the issue.Are there tools to trace this further down?

Continue reading...