Hacker Malware VIRTOOL:Win32\DefenderTamperingRestore

groucho43

I have been suffering from this malware, which disables the Windows Defender services and gives the hacker control of my PC, for a long time. Also from RemoteAdmin:win32\ConnectScreen. I have gone through numerous re-installations but the malware always returns (and the hacker, who prevents me from doing everyday tasks). Any assistance will be very much appreciated. My system is Windows 11 Pro.

Gjoksi

Hello.

Only the malware researchers at Bitdefender Labs can help you solve the issue.

First, take screenshot(s) of the issue,

create a log file on your Windows device using Bitdefender Support Tool, by following these steps:

https://www.bitdefender.com/consumer/support/answer/1733/

and

create a log file on your Windows device using BDsysLog, by following these steps:

https://www.bitdefender.com/consumer/support/answer/1922/

Next, contact Bitdefender Consumer Support by e-mail:

https://www.bitdefender.com/consumer/support/help/

with short description of the issue.

After that, you will get an automated reply by the Bitdefender Customer Care Team, with your ticket number.

Now, in reply to that automated reply, you can send the screenshot(s) you already took and the log files you already created in the first step.

Since you are all done, just wait for the support engineers to investigate your issue and find a solution to fix the issue.

Remember that the screenshot(s) and the log files will help a lot to the support engineers for better and faster investigation on your issue and finding a solution.

You could also perform a scan with these FREE malware removal tools:

Kaspersky Virus Removal Tool 2020

https://www.kaspersky.com/downloads/free-virus-removal-tool

ESET Online Scanner

https://download.eset.com/com/eset/tools/online_scanner/latest/esetonlinescanner.exe

F-Secure Online Scanner

https://download.sp.f-secure.com/tools/F-SecureOnlineScanner.exe

Malwarebytes AdwCleaner

https://adwcleaner.malwarebytes.com/adwcleaner?channel=release

Regards.

Flexx

https://community.bitdefender.com/en/discussion/93348/hacker-malware-virtool-win32-defendertamperingrestore

RemoteAdmin Tools are mostly covered as a part of detection under bitdefender business products. The malware researchers are not into creating detection for RemoteAdmin Tools for bitdefender consumer products until it is really necessary. That being said, kindly follow the steps as stated by @Gjoksi

Regards

groucho43

Would it be possible for a Bitdefender malware removal expert to contact me by telephone?

This malware has made my life quite miserable for a very long time.

If the removal works I shall pay for it, of course.

Thank you very much.

EDITED: Removed telephone number and e-mail. Gjoksi

Gjoksi

Hello again.

As i already wrote in my comment above, you should contact Support:

https://community.bitdefender.com/en/home/leaving?allowTrusted=1&target=https%3A%2F%2Fwww.bitdefender.com%2Fconsumer%2Fsupport%2Fhelp%2F

and ask them if they can help you removing the malware from your device.

Also, visit this section of Bitdefender's website:

https://www.bitdefender.com/premium-services/virus-and-spyware-removal.html

and contact Bitdefender for the possibility of removing the malware.

Regards.