- Status: Resolved — fixed in a September Defender update.
- Affected platforms: Windows 11 (all editions), Windows Server, and Windows 10.
- Error: Windows Security app repeatedly showed a “Turn on virus protection” alert even when Defender was active.
- Fix: Microsoft Defender Antivirus update (version 4.18.26080.4), released September 17, 2026.
For nearly two months, Windows 11 users were being told their antivirus was off — even when it wasn’t. The Windows Defender false alert pushed a “Turn on virus protection” notification, and most users, rightly, didn’t ignore it. They opened the Windows Security app, only to find nothing was actually disabled.
According to Windows Latest, the false alerts first started appearing in early August. Microsoft didn’t formally acknowledge the problem until August 30, and it wasn’t until this week’s security update that the issue was fully patched.
What the bug actually did
The false alert was unusual in a few ways. When you clicked through the notification, you were redirected to the Windows Security home tab, where everything looked normal — Defender active, the last scan time shown, and your PC being protected. It never looked alarming, but it was disorienting to be told your protection was down when it clearly wasn’t.
Windows Latest ran its own tests and found that toggling Defender off and back on made no difference. The alert kept showing regardless of the actual state of your antivirus, which is exactly the kind of thing that makes users nervous about a security app.
Why the Windows Defender false alert was so sticky
The most annoying part was that the alert didn’t stay quiet once you dealt with it. Even if you dismissed the “Turn on virus protection” message, it came back. And you couldn’t turn off the notifications either.
Microsoft noted in its statement that “these notifications can appear when Windows starts and intermittently afterward. They persist even if notification settings are turned off.” Windows Security alerts ignore most notification-related settings for good reasons, but in this case it only made everything more grating.
There was also no easy way to roll it back. Defender updates are pushed out every day, so there wasn’t a single KB you could uninstall and reverse the problem. As Windows Latest pointed out, these updates don’t behave like regular Windows feature updates — you can’t just find one particular update, remove it, and expect Defender to get back to its senses.
Microsoft’s confirmation and fix
Microsoft confirmed the problem in an updated support document, and it named the exact update that resolved it. “This issue was resolved in the Microsoft Defender Antivirus update (version 4.18.26080.4), released on September 17, 2026,” the company stated.
The fix reached most PCs automatically. According to the support document, you don’t have to manually take any action — the patch ships through the normal Defender update channel. The one exception is users who’ve blocked mandatory security updates using Registry Editor or Group Policy. If you’ve paused those updates yourself, you’ll want to make sure the September 17 update has actually installed.
What you need to do
If you’re unsure whether your protection is actually running, you can check directly. Open Windows Security and look at the current status — if it shows active and displays the last threat scan time, you’re good to go.
Alternatively, run a quick PowerShell command to generate a formal security status report:
powershell -command "Get-MpComputerStatus | Select-Object AntivirusEnabled,RealTimeProtectionEnabled,AMServiceEnabled"
That command returns three values, and if all read True, your Defender-related features are working:
AntivirusEnabled : True RealTimeProtectionEnabled : True AMServiceEnabled : True
What this means for you
For most Windows 11 users, the takeaway is simple. The false alert is now gone, and the fix arrived automatically — so there’s nothing you need to reinstall or roll back. If you’re running a build that hasn’t yet received the version 4.18.26080.4 update, it should arrive on its own through the normal update channel.
The one thing to watch is whether you’ve manually paused mandatory updates. If you’ve disabled them via Registry Editor or Group Policy, verify that the September 17 update has installed, since automatic delivery is what would have stopped the nagging alerts.
The bigger picture
This bug is the latest in a string of Windows 11 stumbles. Microsoft is also dealing with problems tied to its biggest September update, including broken features, audio problems on some PCs, and errors on AMD machines. The Defender false alert is a relatively minor annoyance compared to those, but it still raised eyebrows — a security app telling you your protection is down is exactly the kind of thing that makes users jittery.
Microsoft still has a lot to explain about why it took so long, since the problems date back to the first week of August. Until then, the peace of mind of a quiet Windows Security app is a welcome return.
Source: Windows Latest
Over to you: Have you seen the “Turn on virus protection” nag pop up on your machine, or has the September update left it quiet?
