Microsoft Warns Windows Users Not to Fall for False ‘Defender Antivirus Is Turned Off’ Notifications

Microsoft has confirmed that a new “Microsoft Defender Antivirus is turned off” warning on Windows devices is a false alarm caused by a software bug. In a support update posted Friday, the company advised users to ignore these alerts so long as real-time Windows Security protection is marked as active in Settings.

Recent Defender updates from late August are behind the bug. Erroneous notifications appear during bootup and sometimes while a PC is in use, stating that Defender is turned off, even when the antivirus feature works correctly and all settings show it as active. Worse, these messages continue to appear even after users deactivate Defender notifications. Thankfully, the bug itself doesn’t cause a direct security risk because the antivirus engine and scanning remain operational.

The issue affects Windows 11, Windows 10, and multiple Windows Server versions. Users are advised to open Windows Security, go to Virus & threat protection, and confirm that real-time protection shows as On. If there are no real alerts on the dashboard and protection is active, consider “Defender is off” pop-ups as false until Microsoft fixes it in a future Defender update.