Yes I am also facing the same problem!!
How to remove the VirTool:Win32/DefenderTamperingRestore virus from my computer.
How to remove the VirTool:Win32/DefenderTamperingRestore virus from my computer.
Windows for home | Windows 10 | Security and privacy
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
38 answers
Sort by: Most helpful
-
Anonymous
2021-04-13T07:54:19+00:00 -
Anonymous
2021-07-15T02:22:26+00:00 exactly. Thats the same as mine. It will start to create other malware, adware, ransomware, and who knows what if you dont remove it. but everytime on start up when you tuen on your computer it will start frunning. here are my tips. right after your computer turns on, open windows defender and start running offline scans, followed by quick scans. you should detect the virus within 10 scans, if you dont,t then keep scanning. you can download malwarebytes and use the free trial and try to remove the virus completely.
removing the virus that has been detected by windows defender doesnt compeltely remove the program. The program, called 'yixspeedup' is the cause of the virus. It is basically the command center. of the virus. So you need to remove the program in order to remove the virus compeltely. I recommend that you take immediate action. Please forgive me for my poor grammar. -
Anonymous
2022-02-17T05:02:37+00:00 I have the "VirTool:Win32/DefenderTamperingRestore" virus on my pc. Windows Defender can detect it, but somehow it cannot be removed.
Everytime I press "remove" then "Start Actions", then I press quick scan. the threat would still stay there.
-
Reza-Ameri 45,811 Reputation points Volunteer Moderator
2021-02-02T16:02:48+00:00 Windows Defender is able to remove it no matter how it is being hide and encrypted , they are different mechanism to detect and remove it.
Are you facing any difficulty in removing this malware?
Is there any error code?
-
Anonymous
2021-02-01T23:50:49+00:00 Hi Matthew,
Sorry to hear that I was of no help.
You did not mention whether you tried deleting Detection History or not.
If you did not, I would encourage you to follow the instructions in the link and do so.
Defender has had a problem with reporting its own History as a new detection, for a while now.
And the procedure described in the link is simple to accomplish, and is completely safe to do.
You will be deleting something that is rebuilt by Windows, the next time it is needed.
Good luck, Glen