Defender Archives

Winsage

September 1, 2026

Windows 11 Updates Trigger False Antivirus Warnings & Cursor Glitches

Microsoft is addressing two notable issues in Windows 11. The first is a harmless glitch that falsely indicates "Microsoft Defender Antivirus is turned off," which does not impact the antivirus's functionality. Users are advised to wait for a Microsoft update to resolve this. The second issue involves mouse customization settings not saving correctly since the August 27th update, although it only affects cosmetic preferences and not critical settings like pointer speed. Additionally, Microsoft has identified a solution for a game-breaking bug related to the "inpoutx64" driver, which will now be automatically blocked when launching Arc Raiders, with plans to extend this block to Marvel Tokon: Fighting Souls. Developers at Embark Studios have also implemented fixes for affected games, except for Tokon, for which players should use Microsoft's official workaround until a permanent solution is available.

Winsage

September 1, 2026

Next bus to Altrincham delayed by Windows Defender

The UK Departure Boards system displays bus services alongside rail departures, with digital signage common in cities like Manchester. A display featuring the Bee network logo showed estimated arrival times but also included a Windows Defender Firewall notification, likely due to a misconfiguration. This display is part of Vix Technology's initiative to enhance public transport, with plans to install nearly 300 units by 2026, which will provide information and audible updates for visually impaired users. The unit is speculated to be a Vix Technology ITD-2810S or similar, designed for low power consumption and capable of charging overnight.

Tech Optimizer

September 1, 2026

Fake Microsoft Security Scan Tells You to Remove Antivirus—Then Scammers Ask for Remote Access

A new web-based scam is using counterfeit Microsoft-branded security scans to deceive users into uninstalling their antivirus software. The scam websites conduct fake inspections, reporting false security failures and claiming third-party antivirus products are unsupported by Windows. They gather browser information to create customized-looking scan reports and aim to mislead victims into a fraudulent refund process. Investigators have identified 11 related scam sites under the name SysScan, which present themselves as legitimate Microsoft security checks. The scam does not involve file downloads but relies on convincing websites, fabricated security scores, and personal information forms. The scan results are hard-coded, and the security score is limited to a range between 13 and 30 out of 100. The scams instruct users to uninstall antivirus software, which is misleading since Windows does not cease support for third-party antivirus solutions. The scam sites request extensive personal information, including names, addresses, phone numbers, and banking details, and redirect victims to a page claiming a refund manager will call shortly. This process allows scammers to gain remote access to victims' computers. Indicators of compromise include specific IP addresses and domains associated with the scam.

Winsage

September 1, 2026

Windows bug incorrectly tells users that Microsoft Defender Antivirus is turned off

Microsoft Defender's reliability is under scrutiny due to a recent security alert that affects a wide range of Windows versions, including both Windows 11 26H1 and Windows Server 2012. Insurers will require more than verbal assurances about software performance in six months, necessitating the archiving of telemetry data, including sensor check-ins and Defender versions, by Chief Information Security Officers (CISOs). The alert's impact is significant, as a single flaw in Defender can affect various systems categorized into different patch rings, highlighting the need for vigilant monitoring and proactive management of security protocols.

Winsage

August 31, 2026

Windows 10 and 11 users are seeing a Defender warning that isn’t real

Recent updates to Microsoft Defender Antivirus have caused notifications to incorrectly indicate that "Microsoft Defender Antivirus is turned off," despite the software functioning normally. This issue affects various versions of Windows 10, Windows 11, and Windows Server. Microsoft is aware of the bug and is working on a fix, but no specific release date has been announced.

Tech Optimizer

August 31, 2026

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

Silver Fox is linked to the distribution of a backdoor malware called ValleyRAT, disguised as the legitimate QN Wallpaper adware application. Once installed, ValleyRAT provides complete control over the compromised machine. The malware uses DLL sideloading to operate under the guise of a legitimate process, bypassing security measures. It disables Windows Defender and adds itself to autorun entries, and can mark its process as critical, causing system crashes if terminated. Kaspersky has identified specific indicators of compromise (IoCs) including hashes, command-and-control servers, and associated domains. In 2026, Kaspersky recorded over 100,000 detections of ValleyRAT affecting more than 1,500 unique users, mainly in China and India.

Winsage

August 30, 2026

5 Windows Security Settings You Should Never Skip Over

Microsoft has over 1.4 billion active devices each month, making it a target for security vulnerabilities. Users can enhance their security using built-in features without third-party software. Key security measures include: - Windows Hello: Enables secure login via PIN or biometric methods. Activation steps: Settings > Accounts > Sign-in options > Select method > Set up. - Windows Firewall: Protects against malicious internet traffic. Activation steps: Settings > Privacy & security > Windows Security > Firewall & network protection > Toggle on Microsoft Defender Firewall for Public, Domain, and Private networks. - Microsoft Defender: Pre-installed antivirus solution. Ensure it is operational by enabling Real-time protection and Controlled folder access. Activation steps: Settings > Privacy & security > Windows Security > Virus & threat protection > Manage settings. - Microsoft Account: Linking a Microsoft account provides benefits like cross-device syncing and advanced security features. Steps to link: Settings > Accounts > Your info > Sign in with a Microsoft account. - Device Encryption: Protects sensitive information using BitLocker. Activation steps: Settings > Privacy & security > Device encryption > Toggle on. - Find My Device: Allows users to locate their device if lost. Activation steps: Settings > Privacy & security > Location > Toggle on Location services > Find my device > Toggle on Find my device.

Tech Optimizer

August 30, 2026

‘Antivirus Is Turned Off’—Microsoft Confirms Windows Update Mistake

Microsoft has confirmed that notifications stating “Microsoft Defender Antivirus is turned off” are erroneous and can appear during startup and intermittently, even with notification settings disabled. The issue stems from recent updates to Windows antivirus software, but the antivirus is functioning correctly. This problem affects all versions of Windows or Windows Server running Microsoft Defender Antivirus with the latest updates. Users may see pop-ups urging them to “Turn on virus protection,” which falsely suggest that protection is disabled. Microsoft is working on a resolution, and users are advised to verify that their antivirus is operational and that real-time protection is enabled.

Winsage

August 30, 2026

Windows 11 is warning people that Defender Antivirus has been turned off, but don’t worry, says Microsoft

Windows 11 may display false alerts indicating that "Microsoft Defender Antivirus is turned off" after updates, despite the antivirus being active. Microsoft has identified this as a bug and confirmed that no action is needed beyond verifying that Defender is on. A fix is expected soon.

Winsage

August 29, 2026

Microsoft Edge update adds Apple sign-in and scam protection, but officially ends Edge Drop and real-time video translation

Microsoft Edge has introduced a feature allowing users to sign in with their Apple accounts on both Windows and macOS devices, with administrators able to manage its availability. The update includes a security enhancement that automatically unsubscribes users from notifications from scam or malicious sites. However, it also retires features such as Edge Drop, which allowed users to send messages and files to themselves, and the real-time video translation capability. An enhanced key icon in the address bar has been added for easier access to saved credentials. Additional updates include a new Copilot Cowork policy and clarifications on the DowngradeVersion policy for WebView2, while the LocalNetworkAccessRestrictionsTemporaryOptOut policy is set for removal in a future update.