Antivirus and Endpoint Protection Support

You probably do not need to buy another antivirus

Many small offices pay for a consumer antivirus licence on each PC, renewed on different dates, with nobody checking the alerts. Meanwhile Microsoft Defender Antivirus is already built into Windows 10 and 11. Properly configured and monitored, it is a strong choice for most small businesses, and it does not slow PCs down the way some third-party suites do.

If you have Microsoft 365 Business Premium, you also have Microsoft Defender for Business, which adds endpoint detection and response (EDR), automated investigation and a single security portal showing every device. Defender for Business is also sold as a standalone licence for businesses on other Microsoft 365 plans. We help you work out which licence you already have before you buy anything.

What good endpoint protection looks like

• Real-time and cloud-delivered protection on, with automatic sample submission.
• Tamper protection enabled so the settings cannot be switched off locally.
• Attack surface reduction rules: block Office apps creating child processes, block executable content from email, block credential stealing from LSASS, and others, tested in audit mode first.
• Controlled folder access where suitable, to stop unknown programs changing documents.
• Network protection and SmartScreen to block known malicious sites.
• Central reporting through Intune and the Defender portal, so detections are seen by someone, not just a pop-up a user closes.
• Macs and phones covered too: Defender is available for macOS, iOS and Android.

Endpoint protection only works on a patched device. We pair it with update policies, often managed through Intune.

Malware clean-ups

If a PC is already infected, we connect remotely where it is safe to do so, or ask you to disconnect it from the network first. We run offline scans with Defender, check startup items, scheduled tasks, browser extensions and new user accounts, and look for remote access tools that were installed without permission, which is common after tech support scam calls.

If we find signs of deeper compromise, such as a credential stealer, we reset the user's passwords from a clean device and revoke sessions. Where a machine cannot be trusted, we recommend a wipe and reinstall. It is often quicker than chasing every trace. For encrypted files and ransom notes, see ransomware recovery. For infected websites, see website malware removal.

Tech support scam calls and fake pop-ups

A browser page that suddenly goes full screen, plays a warning sound and tells you to call "Microsoft" on a number is not a virus warning. It is a scam page, usually reached through a malicious advert. Close the browser with Ctrl+Shift+Esc and Task Manager if needed, and never call the number. Microsoft does not phone you about infections.

If someone has already let a caller connect with AnyDesk, TeamViewer or a similar tool, treat the PC as compromised. Disconnect it from the internet and call us. We remove the remote access software, check for anything else installed, and reset passwords for any accounts used on that PC, including online banking. Tell your bank straight away if the caller saw a banking session.

Endpoint protection and Cyber Essentials

Malware protection is one of the five Cyber Essentials technical controls. The requirements accept anti-malware software that updates in line with the vendor's recommendations and scans files on access, or application allow-listing. Microsoft Defender meets this when it is enabled and updating. The other controls, especially patching within 14 days and removing everyday admin rights, matter just as much. Our Cyber Essentials readiness service checks all five.

Pricing

Standardising a small office on Microsoft Defender, removing old antivirus products, setting tamper protection and ASR rules, and connecting devices to central reporting is charged at £45 an hour + VAT. A single malware clean-up is charged the same way, with a 30 minute minimum. For ongoing monitoring, our Complete plan at £99 a month + VAT includes 3 hours of work each month and IT and Microsoft 365 helpdesk support, so alerts get looked at and acted on.

According to the UK Government's Cyber Security Breaches Survey 2025/2026, 81% of businesses say they have up-to-date malware protection. The harder part is making sure it stays switched on and somebody reads the alerts.

What it costs

Support plans from £25 a month + VAT, or £45 an hour + VAT for one-off fixes. Pick a plan if you want it looked after every month, or pay by the hour for a one-off job.

Related