This forum thread needs a solution.
Kudos0

I got VirTool:Win32/DefenderTamperingRestore in my PC, TWICE! And Norton does not seem to detect it at all.

In the last two months my PC got infected with VirTool:Win32/DefenderTamperingRestore, TWICE.
My Norton 360 does not seem to detect it at all. Neither does Norton Power Eraser.

I realized my PC was acting funny, I ran the antivirus... nothing. I ran NPE... nothing came out either. Everything was green. But my PC was still acted weird, so I checked the Task Administrator in my PC and saw things that were taking too many resources in my PC, then begun looking in Internet forums. I found a possible fix and tried it. It did work, but came out with the news that it had detected, and removed, this virus Norton had let slip through.

The tool I used was Microsoft Safety Scanner that can be downloaded in their official website. I ran it in secure mode, and voilá! The issue was fixed.

I did get tech support from Norton and they did a thorough check of my computer to make sure that everything was gone, and it was. Thanks to Microsoft! Not to Norton.

What worries me is that today I got the same problem, again! And Norton detected nothing! I was downloading a few fonts - I'm a designer, from a "safe" website I will never, ever, visit again, and BANG! While Norton was "asleep".

How can this be fixed? Why is Norton not detecting this virus? Power Eraser is not detecting it either!

Has anyone else had had a similar problem? Have you found a solution?

Thanks, and have a very nice day.

Replies

Kudos1 Stats

Re: I got VirTool:Win32/DefenderTamperingRestore in my PC, TWICE! And Norton does not seem to detect it at all.

Kudos0

Re: I got VirTool:Win32/DefenderTamperingRestore in my PC, TWICE! And Norton does not seem to detect it at all.

Thank you xjoex.

I have read the post you so kindly provided, and I want to make sure I'm understanding correctly.

So this means that Microsoft Safety Scanner removed something that is in itself designed to prevent other sofware to remove Windows inbuilt protection?

Now I'm confused. Sorry, I'm not that tech savvy

Thank you for throwing a light here.

Kudos1 Stats

Re: I got VirTool:Win32/DefenderTamperingRestore in my PC, TWICE! And Norton does not seem to detect it at all.

Yes that is my understanding also.

Norton does not detect it because it is a Microsoft security feature that is meant to prevent tampering with the Microsoft product. So if you delete it I assume MS just reinstalls it. And it appears that the right hand at MS does not know what the left hand is doing.

I could be all wet here but as I say that is my understanding of your issue.

Kudos0

Re: I got VirTool:Win32/DefenderTamperingRestore in my PC, TWICE! And Norton does not seem to detect it at all.

Thank you xjoex.
Your answer has been very helpful.
I am now going through all the links that came embedded in your previous suggestion, there's a lot on info there as well.

I just want to make sure I'm not getting any viruses.

Thanks again and have a great day.