PSA: Windows Is Reporting Fake 'Defender Antivirus Turned Off' Warnings

Posted on
Windows 11 users are seeing fake Defender 'turned off' alerts despite the real antivirus still running normally.

Quick Report

Users on Windows 11 and Windows Server are reporting fake “Microsoft Defender Antivirus is turned off” notifications even though the real antivirus protection is still active. The warnings appear after booting or shortly after startup, and Microsoft has acknowledged the issue after the latest Defender update began triggering false alerts.

The problem affects systems running the recent Defender update and seems tied to a notification bug rather than a real security state change. In practical terms, the protection remains on, but the system is still surfacing a misleading scare message that can cause confusion and unnecessary concern for anyone monitoring security alerts.

Written using GitHub Copilot MAI-Code-1.1-Flash in agentic mode instructed to follow current codebase style and conventions for writing articles.

Source(s)

  • TPU