Este tópico do fórum precisa de uma solução
Kudos0

Version 22.23.4.6 - e-mails Microsoft Defender: real-time protection is disabled

Postado: 22-mai-2023 | 12:42PM · 10 Respostas · · Translation:

Since the update to version 22.23.4.6 of Norton 360

Each time my computer has booted I receive e-mails from Microsoft Defender (Microsoft Defender <mydefender@microsoft.com>) that real-time protection is disabled in Windows .

I  tried the program Norton Remove and Reinstall and this has no effect on the issue. 

The text in dutch is:

"My device name" is niet volledig beveiligd

Realtime-beveiliging is uitgeschakeld op het Windows apparaat "My device name" op 22-5-2023. Schakel realtime-beveiliging opnieuw in om dit apparaat te beschermen tegen malware.

Respostas

Kudos0

Re: Version 22.23.4.6 - e-mails Microsoft Defender: real-time protection is disabled

Postado: 22-mai-2023 | 1:53PM · Edited: 22-mai-2023 | 1:55PM · Link permanente

Hallo Gert. Dit klinkt als oplichterij van mijn kant. Ten eerste, als A/V van derden is geïnstalleerd, overhandigt MS Defender alle antivirusvlaggen aan Norton binnen Windows. Defender houdt zijn Windows Firewall alleen ingeschakeld om Windows Updates correct te laten werken. Ik zou het volgende doen:

- Wis uw browsercaches, ALLE browsers die zijn geïnstalleerd.

-Wis de inhoud van de map C:\Windows\Temp

- Wis app-gegevens in uw profiel - Gebruik vanaf de run-prompt %temp% en wis de volledige inhoud van uw profielcache

- Voer een volledige systeemscan uit met Malwarebytes en kijk wat het rapport u vertelt. Verwijder alles wat het detecteert gerelateerd aan PUP/POP en registervermeldingen gerelateerd aan browsen

Start opnieuw op en controleer of het bericht opnieuw verschijnt.

SA

Hello Gert. This sounds to be a scam from my side of things. Firstly, with third party A/V installed MS Defender hands all antivirus flags to Norton within Windows. Defender only keeps its Windows Firewall enable for the sake of Windows Updates functioning correctly. I would do the following:

- Clear your browser caches, ALL browsers that are installed.

-Clear the contents of the C:\Windows\Temp directory

-Clear app data in your profile - From the run prompt use %temp% and clear the entire contents of your profile cache

-Run a full system scan with Malwarebytes and see what its report tells you. Remove anything it detects related to PUP/POP and registry entries related to browsing

Reboot and check for the message appearing again.

SA

MS Certified Professional Windows 11 Home/Pro 22H2 x 64 build 22621.2283 - Windows 10 Pro x 64 version 22H2 / build 19045.3448 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.8.4 / Opera GX LVL5 (core:101.0.4843.85) 64 bit-Early Access w/Norton Chrome Extensions
Kudos0

Re: Version 22.23.4.6 - e-mails Microsoft Defender: real-time protection is disabled

Postado: 23-mai-2023 | 11:03AM · Link permanente

It is not a scam. I own a subscription to Microsoft 365 so I have the extra Microsoft Defender App that sends warnings if a device is not secured.

The issue started after I did a manual LiveUpdate to the latest version of Norton. From that momemt every time the PC boots I receive an e-mail.

I checked Microsoft Defender and I saw that it has problems detecting Norton. In the screenshot you can see that it takes Defender time before it detects that Norton is running after the PC is restarted. During that time warnings are send via e-mail via the Microsoft 365 Defender App that is linked to my Microsoft Account.

I am sure that the warning is false.

Kudos0

Re: Version 22.23.4.6 - e-mails Microsoft Defender: real-time protection is disabled

Postado: 23-mai-2023 | 11:15AM · Link permanente

Enclosed you can see a screenshot from the e-mails from Defender:

Kudos0

Re: Version 22.23.4.6 - e-mails Microsoft Defender: real-time protection is disabled

Postado: 23-mai-2023 | 1:41PM · Edited: 23-mai-2023 | 1:44PM · Link permanente

Thanks for the post-back. Windows 365 would indeed be the culprit as that would have been the next question for you. Knowing that Windows Defender and Microsoft 365 Defender are two different product, let me ask these question all the same:

Have you done a "remove only" scenario with the R&R tool, rebooted, then manually removed ALL folders and files left behind related to Norton, rebooted. Then installed Norton again from your Norton account?

Do you have "periodic scanning" set to ON as well as " memory integrity " in Core Isolation within Windows Security settings?

Do you also have Norton "boot time" protection set to normal, aggressive or ?

What is your OS and its version/build?

What appears in your Microsoft 365 portal that is related? 

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoi...

SA

MS Certified Professional Windows 11 Home/Pro 22H2 x 64 build 22621.2283 - Windows 10 Pro x 64 version 22H2 / build 19045.3448 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.8.4 / Opera GX LVL5 (core:101.0.4843.85) 64 bit-Early Access w/Norton Chrome Extensions
Kudos0

Re: Version 22.23.4.6 - e-mails Microsoft Defender: real-time protection is disabled

Postado: 23-mai-2023 | 2:19PM · Link permanente

  1. I do not use Defender Endpoint. I believe this is for organisations and not a personal account. I can't login to the link you provided: AADSTS500200: User account 'XXX' is a personal Microsoft account. Personal Microsoft accounts are not supported for this application unless explicitly invited to an organization. Try signing out and signing back in with an organizational account.
  2. Wit the R&R - tool I dit the standard 'automatic'procedure: remove and reinstall after reboot. The version installed with R&R was not 22.23.4.6. I received a previuos version and updatet to version 22.23.4.6 with a new manual LiveUpdate. After the installation I checked the Norton Autofix and a fix needed to be applied.
  3. Periodic scanning is off in Windows Defender. It's the only option available. I don't have the option " memory integrity " in Core Isolation within Windows Security settings.
  4. Norton "boot time" protection is set to 'off'. I have never changed those values.
  5. Editie    Windows 10 Home
    Versie    22H2
    Installatiedatum    ‎15/‎08/‎2020
    Build van besturingssysteem    19045.2965
    Ervaring    Windows Feature Experience Pack 1000.19041.1000.0
     
Kudos0

Re: Version 22.23.4.6 - e-mails Microsoft Defender: real-time protection is disabled

Postado: 23-mai-2023 | 2:53PM · Link permanente

Thanks again. Set the Norton boot time protection to "normal" save the settings and restart. Lets see if that allows Defender to hand off things to Windows and Norton in a more timely fashion.

SA

MS Certified Professional Windows 11 Home/Pro 22H2 x 64 build 22621.2283 - Windows 10 Pro x 64 version 22H2 / build 19045.3448 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.8.4 / Opera GX LVL5 (core:101.0.4843.85) 64 bit-Early Access w/Norton Chrome Extensions
Kudos0

Re: Version 22.23.4.6 - e-mails Microsoft Defender: real-time protection is disabled

Postado: 24-mai-2023 | 8:32AM · Link permanente

I set the Norton boot time protection to "normal" saved and restarted. This has no effect.

When I restart Windows and I click on the white Windows security shield it takes minutes before Windows detects that Norton is present on my system => see my first picture the shield has no green 'V' at the beginnin. During that time Defender sents the e-mails.

Kudos0

Re: Version 22.23.4.6 - e-mails Microsoft Defender: real-time protection is disabled

Postado: 24-mai-2023 | 10:44AM · Link permanente

I would consult Microsoft about this issue simply because, Defender is causing the issue with Norton taking over the system protection as it should. For your further reference:

https://answers.microsoft.com/en-us/msoffice/forum/all/microsoft-defende...

SA

MS Certified Professional Windows 11 Home/Pro 22H2 x 64 build 22621.2283 - Windows 10 Pro x 64 version 22H2 / build 19045.3448 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.8.4 / Opera GX LVL5 (core:101.0.4843.85) 64 bit-Early Access w/Norton Chrome Extensions
Kudos1 Estatísticas

Re: Version 22.23.4.6 - e-mails Microsoft Defender: real-time protection is disabled

Postado: 24-mai-2023 | 11:17AM · Link permanente

I checked the MS-link.
Conclusion: after more than 6 months there is no solution. Microsoft: "this is a common issue with Defender at the moment of which the Defender team are aware and we’re awaiting an update."

As I don't use it, I decided to remove the Windows Defender App. As a result no more e-mails from Defender

Kudos0

Re: Version 22.23.4.6 - e-mails Microsoft Defender: real-time protection is disabled

Postado: 24-mai-2023 | 1:34PM · Link permanente

Thanks once again for the timely reply. I'm in hope that this corrects the false alert message being sent. Please keep us informed so we may follow up if needed. 

SA

MS Certified Professional Windows 11 Home/Pro 22H2 x 64 build 22621.2283 - Windows 10 Pro x 64 version 22H2 / build 19045.3448 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.8.4 / Opera GX LVL5 (core:101.0.4843.85) 64 bit-Early Access w/Norton Chrome Extensions

This thread is closed from further comment. Please visit the forum to start a new thread.