Default Program Settings in Windows Security

Question

I have noticed that, in my installation of Windows 11, I have not touched any of the settings in Windows Security, yet there are numerous programs that have system overrides enabled. My question is a general question. Which applications have system overrides turned on by default?

I have been the victim several times over from a malicious user and neighbor of mine that has found me to be an easy target for MITM evil twin attacks and with not enough knowledge of how to protect against this I have been in a great deal of mental anguish for quite some time now. Anyone that would not mind helping with an explanation for how to harden my image of Windows or any suggestions that could help create a solution for this problem that I keep having would be helping me greatly and would definitely be appreciated by myself.

Big thanks, in advance, to the Microsoft Community and all of the members out there. You are all my heroes!

Answer 1

I am happy to help. Keep me posted on your progress as I will be here to help until the case is resolved.

Answer 2

Thank you for the information, assistance, and your time, of course, with this problem Mr. Carmack. I will utilize this information with attention to detail. Updates and reports will be posted later tonight and as I progress through your list.

😊👍

Answer 3

Hi BR. I'm Greg, 10 years awarded Windows MVP, here to help you.

1. You can determine for sure if you're being hacked and prevent it by reading and following these best articles:

https://preyproject.com/blog/en/have-i-been-hac...

https://www.windowscentral.com/signs-pc-hacked

https://www.csoonline.com/article/2457873/signs...

2. Go into Settings > Apps > Apps & Features, if you suspect a date then choose Sort by:Date and uninstall anything you didn't install yourself on that date. If no date is known go through the list and report back any apps you're not sure about.
3. Secure your router by resetting it and then setting a strong password to sign into the router, and a strong wireless key to sign into your network. You can find your router manual by googling the exact model (on bottom) to follow the reset instructions, set the password and wireless key, optimize Security and Performance per these articles:

https://www.lifewire.com/resetting-a-home-netwo...

https://www.techradar.com/broadband/how-to-chan...

http://www.maximumpc.com/article/features/ultim...

Now you've created a fortress that almost no one can penetrate. To make sure nothing has already infected Windows:

4. Download, install and run a full scan with the most powerful on-demand free scanner Malwarebytes:

https://www.malwarebytes.com/mwb-download/ Make sure to only choose the Free version.

In the Malwarebytes Settings (gear icon) > Security tab set it to include scanning for Rootkits.
If necessary run it in Safe Mode with Networking, or Safe Mode accessed by one of these methods: https://www.digitalcitizen.life/4-ways-boot-saf...

Clean up anything found, restart PC and then run again until it comes up clean.

5. Then download, install and run a full scan with AdwCleaner:
   http://www.bleepingcomputer.com/download/adwcle...
   Remove whatever it finds.
6. Check for anything it finds but is still left over in Settings > Apps > Apps & Features, and C:\Program Files and C:\Program Files(86) to uninstall or delete them. I can guide you how to do this if there are problems.
7. Also in each of your browser's Extensions, Home Page settings, Search service or Add-On's as shown here: https://www.computerhope.com/issues/ch001411.htm  to disable anything you didn't add yourself and are sure you need. Ask back if in doubt.
8. Then check for damaged System files by running System File Checker/DISM in WIndows 11: https://www.elevenforum.com/t/use-system-file-checker-sfc-to-repair-system-files-in-windows-11.720/
9. If that doesn't fix it then you can do a Windows 11 Repair Upgrade which reinstalls Windows while saving your files and apps in place, brings it up to the latest version by the most stable method, takes about an hour and resolves most problems: https://www.elevenforum.com/t/repair-install-windows-11-with-an-in-place-upgrade.418/

You can remove any exceptions for apps or services you don't recognize in the Windows Defender firewall as shown here:
https://www.veritas.com/content/support/en_US/a...
You can also ask back here or ask Google to learn more about a listed exception.

If you want to keep Malwarebytes as an on-demand scanner then you can turn off its Real Time trial version using the slider buttons on it's front panel.

Feel free to ask back any questions. If you'll report back results for each step in each link it can help determine what else needs to be tried. I will stick with you until it is fixed.

______________________________________________

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.