Home » Technology » New Defender update ends constant false antivirus messages

New Defender update ends constant false antivirus messages

A faulty Defender security alarm has caused uncertainty among many Windows users in recent weeks. Microsoft is now releasing a fix that should eliminate the erroneous message “Antivirus is disabled.”

False alarm at startup

Windows 10, Windows 11 and numerous Windows Server versions were affected. Since the end of August, a warning could appear when starting up the computer or later during operation that Microsoft Defender Antivirus was switched off. Annoyingly, the message could not be permanently suppressed using the Windows notification settings. In fact, the virus protection was not down. Microsoft Defender continued to work in the background, real-time protection remained active, and files were scanned for threats as intended. The problem lay in the transmission or presentation of the protection status – not in the actual protection function.

Cause in status comparison

The error is apparently caused by an inconvenient time when the system starts. Windows Security Center queries the status of the antivirus protection installed, while Defender may not be fully initialized yet. If the security center received an incomplete or outdated value, it could incorrectly classify the protection as deactivated – although Defender started normally shortly afterwards. The Impact went into corporate environments beyond an annoying warning. Systems could appear non-compliant in Microsoft Intune, for example. If access to company services was linked to a PC classified as “compliant” via policies, employees could be excluded from resources despite active virus protection.

Update should stop the false warnings

With version 4.18.26080.4, Microsoft says it has now adjusted the startup process. Defender should transmit its status to the Windows Security Center earlier in the future. If the protection is not yet fully ready when it is first accessed, the new version waits for a limited time until it is initialized and then compares the actual status again. This means that the security center will no longer permanently save an incorrect status.

The update affects, among other things:

  • Windows 11 from version 23H2 up to newer editions.
  • Windows 10 in versions 21H2 and 22H2 as well as LTSC variants.
  • Windows Server 2025, 2022, 2019, 2016 as well as Server 2012 and 2012 R2.
  • On affected devices, it is usually sufficient to update the Defender platform to version 4.18.26080.4 or newer. This error does not require any intervention in the registry, a reinstallation of Defender or switching to another virus scanner. The package is usually distributed via Windows Update or the Defender update channels.

    Leave a Reply