[DISCUSSION] Disabling Microsoft Defender Antivirus (formerly Windows Defender)

Discussion in 'Windows 11' started by Espionage724, Oct 29, 2021.

  1. SM03

    SM03 MDL Expert

    Dec 16, 2012
    1,522
    634
    60
  2. boe323

    boe323 MDL Expert

    Jul 19, 2011
    1,789
    540
    60
    #242 boe323, Jun 5, 2024
    Last edited: Jun 5, 2024
    has i said before ..it will never install because you have removed software that it depends on ....but wont stop wu from trying when it sees its missing from core functions
    Probably there is reg entries somewhere,
    Run that script that guy provided to see if it will remove what ever is triggering it

    try this Wusa /uninstall /kb:KB5007651
    see if it returns anything
     
  3. SM03

    SM03 MDL Expert

    Dec 16, 2012
    1,522
    634
    60
    1. as WD/WS removed from ISO (WIM) so KB5007651 won't offer immediately after clean installing the latest Win version. But as soon as the next LCU is released & installed, WU starts offering & installing that KB5007651

    2. I've checked every REG key tweak & no, (unlike the MSRT KB890830) for this KB5007651, there's no reg tweak to block/defer it.

    3. Which script & guy?
    If you're referring to this script that raptorddd shared, then I already checked & replied here


    To summarise:
    I've done my research regarding this in the last 24 hours & have confirmed from multiple sources that

    this KB5007651 can't be blocked or deferred completely (unlike the MSRT KB890830) via any reg tweak or GP.
    Only solution to stop / block the Windows Update completely which for me, ain't a solution

    I've been hiding this KB5007651 with WUMT, & as no way to block it, I've to keep doing it on that route.
     
  4. Jingzin

    Jingzin MDL Addicted

    Nov 10, 2021
    666
    532
    30
    you cant see it on screenshoot i posted because of i havent installed it

    as to yours well strange and im 100% sure if its installed cbsenum will list it as it copies list from regedit.
    see if your update shows here if it does then it does show in cbsenum
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages
     
  5. SM03

    SM03 MDL Expert

    Dec 16, 2012
    1,522
    634
    60
    there are too many packages, can you specify which one to look at exactly?
     
  6. Jingzin

    Jingzin MDL Addicted

    Nov 10, 2021
    666
    532
    30
    nope. i dont remember
     
  7. °ツ

    °ツ MDL Addicted

    Jun 8, 2014
    905
    1,181
    30
    When I tried this on IoT LTSC 2024 I noticed that reputation based protection in settings was enabled and I could not disable it so I had to re install and disable defender in other way. On my 26100 Enterprise G it is showing as disabled.
    So maybe it's better to not disable WD this way on IoT or perhaps both versions of LTSC 2024.
     
  8. Atari800XL

    Atari800XL MDL Expert

    Apr 3, 2011
    1,003
    1,746
    60
    #248 Atari800XL, Jun 7, 2024
    Last edited: Jun 7, 2024
    Thanks for that, but I don't know what "reputation based protection" is, can you elaborate? I'm sure JFX would be interested as well if it's an important issue.
     
  9. atgpud2003

    atgpud2003 MDL Addicted

    Apr 30, 2015
    629
    111
    30
    I did disabled Windows Defender IoT LTSC 2024 no problem.. I use WinAero Tweaker 1.62.xx and works...

    ATGPUD2003
     
  10. °ツ

    °ツ MDL Addicted

    Jun 8, 2014
    905
    1,181
    30
  11. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    4,188
    6,014
    150
    Managed by ... :p
    Activated by MAS, Sub.... License ..

    upload_2024-6-8_0-9-54.png

    upload_2024-6-8_0-5-37.png

    upload_2024-6-8_0-7-36.png
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  12. Atari800XL

    Atari800XL MDL Expert

    Apr 3, 2011
    1,003
    1,746
    60
    I mentioned the issue to "JFX" (WinNTSetup dev) and this is his answer:
    "It's just a problem with settings app. It probably tries to communicate with Defender and does not get any response."

    So, are you saying Smartscreen is *actually* enabled, or is it just a matter of the settings app displaying the wrong info?
    Of course, if it is really on, this is a problem that he might have to investigate further.
     
  13. Stimpy88

    Stimpy88 MDL Senior Member

    Mar 24, 2011
    378
    213
    10
    #253 Stimpy88, Jun 8, 2024
    Last edited: Jun 8, 2024
    Thank you for this script, it looks like it can finally replace my own, which focused on the leftovers after using the Sordum remover. Though I still have to try it on a fresh install, which is where most other remover tools seem to fall over.

    Could you please tell me where this is located/maintained, if there are newer versions, bug fixes etc?
     
  14. maur0

    maur0 MDL Senior Member

    Aug 3, 2012
    404
    188
    10
  15. Stimpy88

    Stimpy88 MDL Senior Member

    Mar 24, 2011
    378
    213
    10
  16. Stimpy88

    Stimpy88 MDL Senior Member

    Mar 24, 2011
    378
    213
    10
    Not had any issues using the Sordum tool in the 2 years I've used it, but SmartScreen is something that most of these tools and scripts overlooked, yet is one of the most annoying parts of Defender, so I made a script that removed it myself. Sometimes after an update, SmartScreen would come back, but the rest of Defender didn't.
     
  17. drew84

    drew84 MDL Expert

    Mar 13, 2014
    1,402
    2,392
    60
    Pretty Certain it is an earlier version of @Dark Dinosaur's script that can be found here
     
  18. raptorddd

    raptorddd MDL Addicted

    Aug 17, 2019
    739
    289
    30
    #259 raptorddd, Jun 9, 2024
    Last edited: Jun 9, 2024
    found it in other forum and yes i did sent you a sort of a PM. its said start a conversation.i sent you yesterday.

    Screenshot 2024-06-09 081446.png

    Screenshot 2024-06-09 082013.png
     
  19. °ツ

    °ツ MDL Addicted

    Jun 8, 2014
    905
    1,181
    30
    I don't know. I just assumed that it was enabled since it shows as enabled.
    Will check some other time.
    But this doesn't happen on 26100 Entperise (non LTSC).
    Not on LTSC 2021 either. And probably not on other Windows versions too.
    Odd.