VirTool:Win32/DefenderTamperingRestore is a detection name used by Windows Defender to identify a potential threat or suspicious activity on your system. However, it is important to note that false positives can occur, and it is possible that this detection is a glitch or an incorrect identification.
If both Malwarebytes and Windows Defender scans show no signs of infection, it is likely that your system is clean. Sometimes, Windows Defender may continue to display the warning due to a temporary error or caching issue. In such cases, manually removing the detected items, as you mentioned, might not be necessary.
To troubleshoot the issue and potentially resolve the continuous warning, you can try the following steps:
1. Update Windows...