Microsoft Advises Users to Disregard False ‘Antivirus Disabled’ Alerts After Defender Update

Microsoft has asked Windows users to dismiss a series of misleading notifications that claim Windows Defender Antivirus has been turned off after the most recent security update. The guidance, posted on the company’s support site, says the alerts are a known glitch and do not reflect the actual protection status of the device.

The erroneous messages appear after the latest definition and platform updates are applied, displaying a banner that reads “Antivirus is turned off.” In reality, the Defender service continues to run and scan files as usual; only the user interface is reporting the wrong state.

The issue first surfaced in reports from security‑focused outlets, including BleepingComputer, which documented the problem and shared screenshots of the false warnings. Microsoft’s response confirmed the bug, noting that it was introduced inadvertently during the update cycle and that no malware or other threat has been detected as a result.

While the flaw is purely cosmetic, it has the potential to cause unnecessary alarm among home users and IT administrators. Some organizations reported that the alerts prompted staff to double‑check security settings, diverting attention from other operational tasks. Microsoft emphasized that the underlying protection mechanisms remain intact and that there is no need to reinstall or re‑enable Defender manually.

According to the company’s statement, a corrective patch is already in development and will be rolled out in the next cumulative update for Windows 10 and Windows 11. In the interim, users are encouraged to verify the real status of Defender through the Windows Security app or the command‑line tool “sc query windefend,” and to ignore the spurious pop‑ups.

The episode underscores the complexity of maintaining a built‑in antivirus solution that must be updated continuously to combat evolving threats. Prompt communication from Microsoft helps prevent confusion and reassures users that their systems remain protected while the fix is being prepared.