# Antivirus and Endpoint Protection Support Source: https://dijitulsupport.co.uk/antivirus-endpoint-protection/ Updated: 2026-10-10 > dijitul support sets up and looks after antivirus and endpoint protection for UK small businesses, usually Microsoft Defender, configured with tamper protection, attack surface reduction rules and central alerts. We also clean up infected PCs. One-off work is £45 an hour + VAT; ongoing care is in our Complete plan at £99 a month + VAT. ## Common symptoms - Each PC runs a different antivirus, some of them expired - Pop-ups claiming your PC is infected and telling you to call a number - Antivirus has been switched off and nobody knows why - A PC has become very slow and the browser homepage has changed - You have no idea whether any device has detected a threat this month - A free antivirus trial is nagging staff to pay ## Key facts - Microsoft Defender Antivirus is built into Windows 10 and 11 and is suitable for most small offices when properly configured - Microsoft 365 Business Premium includes Defender for Business with endpoint detection and response (EDR) - Tamper protection stops malware, or a user, switching Defender off - Attack surface reduction (ASR) rules block common tricks like Office macros launching scripts - The Cyber Security Breaches Survey 2025/2026 found 81% of UK businesses have up-to-date malware protection - One-off work: £45 an hour + VAT; Complete plan: £99 a month + VAT ## You probably do not need to buy another antivirus Many small offices pay for a consumer antivirus licence on each PC, renewed on different dates, with nobody checking the alerts. Meanwhile Microsoft Defender Antivirus is already built into Windows 10 and 11. Properly configured and monitored, it is a strong choice for most small businesses, and it does not slow PCs down the way some third-party suites do. If you have Microsoft 365 Business Premium, you also have **Microsoft Defender for Business**, which adds endpoint detection and response (EDR), automated investigation and a single security portal showing every device. Defender for Business is also sold as a standalone licence for businesses on other Microsoft 365 plans. We help you work out which licence you already have before you buy anything. ## What good endpoint protection looks like - **Real-time and cloud-delivered protection on**, with automatic sample submission. - **Tamper protection enabled** so the settings cannot be switched off locally. - **Attack surface reduction rules**: block Office apps creating child processes, block executable content from email, block credential stealing from LSASS, and others, tested in audit mode first. - **Controlled folder access** where suitable, to stop unknown programs changing documents. - **Network protection and SmartScreen** to block known malicious sites. - **Central reporting** through Intune and the Defender portal, so detections are seen by someone, not just a pop-up a user closes. - **Macs and phones** covered too: Defender is available for macOS, iOS and Android. Endpoint protection only works on a patched device. We pair it with update policies, often managed through [Intune](https://dijitulsupport.co.uk/device-management-intune/). ## Malware clean-ups If a PC is already infected, we connect remotely where it is safe to do so, or ask you to disconnect it from the network first. We run offline scans with Defender, check startup items, scheduled tasks, browser extensions and new user accounts, and look for remote access tools that were installed without permission, which is common after tech support scam calls. If we find signs of deeper compromise, such as a credential stealer, we reset the user's passwords from a clean device and revoke sessions. Where a machine cannot be trusted, we recommend a wipe and reinstall. It is often quicker than chasing every trace. For encrypted files and ransom notes, see [ransomware recovery](https://dijitulsupport.co.uk/ransomware-recovery/). For infected websites, see [website malware removal](https://dijitulsupport.co.uk/malware-removal/). ## Tech support scam calls and fake pop-ups A browser page that suddenly goes full screen, plays a warning sound and tells you to call "Microsoft" on a number is not a virus warning. It is a scam page, usually reached through a malicious advert. Close the browser with Ctrl+Shift+Esc and Task Manager if needed, and never call the number. Microsoft does not phone you about infections. If someone has already let a caller connect with AnyDesk, TeamViewer or a similar tool, treat the PC as compromised. Disconnect it from the internet and call us. We remove the remote access software, check for anything else installed, and reset passwords for any accounts used on that PC, including online banking. Tell your bank straight away if the caller saw a banking session. ## Endpoint protection and Cyber Essentials Malware protection is one of the five Cyber Essentials technical controls. The requirements accept anti-malware software that updates in line with the vendor's recommendations and scans files on access, or application allow-listing. Microsoft Defender meets this when it is enabled and updating. The other controls, especially patching within 14 days and removing everyday admin rights, matter just as much. Our [Cyber Essentials readiness](https://dijitulsupport.co.uk/cyber-essentials-readiness/) service checks all five. ## Pricing Standardising a small office on Microsoft Defender, removing old antivirus products, setting tamper protection and ASR rules, and connecting devices to central reporting is charged at £45 an hour + VAT. A single malware clean-up is charged the same way, with a 30 minute minimum. For ongoing monitoring, our [Complete plan](https://dijitulsupport.co.uk/pricing/) at £99 a month + VAT includes 3 hours of work each month and IT and Microsoft 365 helpdesk support, so alerts get looked at and acted on. According to the UK Government's Cyber Security Breaches Survey 2025/2026, 81% of businesses say they have up-to-date malware protection. The harder part is making sure it stays switched on and somebody reads the alerts. ## FAQs ### Is Microsoft Defender good enough for a small business? For most small businesses, yes, when it is properly configured, kept updated and monitored centrally. dijitul switches on tamper protection, cloud protection and attack surface reduction rules, and connects devices to a reporting portal so detections are seen. Business Premium adds Defender for Business with EDR. ### What is the difference between antivirus and EDR? Antivirus blocks known malicious files. Endpoint detection and response (EDR) also watches behaviour, such as a Word document launching PowerShell, records what happened and can isolate a device remotely. Microsoft Defender for Business, included in Microsoft 365 Business Premium, provides EDR suitable for small businesses. ### Can you remove a virus from my PC remotely? Usually, yes. dijitul connects remotely, runs offline scans, removes persistence such as scheduled tasks and rogue browser extensions, and checks for unauthorised remote access tools. If the device cannot be trusted afterwards, we recommend a clean reinstall. Clean-ups are £45 an hour + VAT. ### Should we remove our old antivirus before using Defender? Yes. Running two real-time antivirus products causes slowdowns and conflicts. When a third-party product is installed, Defender switches to passive mode. dijitul uninstalls expired or unwanted products properly, including leftover services, then confirms Defender is active and reporting. ### Do Macs need antivirus? macOS includes XProtect and Gatekeeper, which block known malware, but Macs are still targeted by adware and information stealers. For businesses wanting central visibility, Microsoft Defender for Endpoint is available for macOS. dijitul can deploy it alongside Windows devices so all alerts are in one place. ## Pricing and contact Support plans from £25 a month + VAT, or £45 an hour + VAT for one-off fixes. Plans: Essential £25/month + VAT (Website software updates (core, plugins, themes) applied and checked, Daily backups, Uptime monitoring, Security monitoring); Business £50/month + VAT (Everything in Essential, 1 hour of fixes or changes every month, Priority support); Complete £99/month + VAT (Everything in Business, 3 hours of fixes or changes every month, IT and Microsoft 365 helpdesk for your team). Ad-hoc support is £45 an hour + VAT. The first 30 minutes are the minimum charge, then we bill in 15-minute blocks. Contact: 01623 650333, support@dijitul.uk, https://dijitulsupport.co.uk/contact/