[DISCUSSION] Disabling Microsoft Defender Antivirus (formerly Windows Defender)

Discussion in 'Windows 11' started by Espionage724, Oct 29, 2021.

  1. TairikuOkami

    TairikuOkami MDL Expert

    Mar 15, 2014
    1,253
    1,151
    60
    Disable realtime/tamper protection - install 3rd party AV (adaware leaves the least mess) - update definitions, restart - disable defender's services - restart - uninstall 3rd party AV (via hibit uninstaller).
     
  2. RobrPatty

    RobrPatty MDL Expert

    Jul 23, 2009
    1,280
    593
    60
    Warning: this is irreversible
    First, add reg keys to disable it with @bau's toggle defender script:
    Next, boot into WinPE/WinRE
    Open the command prompt, then enter regedit to open the registry editor.
    Select HKEY_LOCAL_MACHINE, go to file -> load hive, open the partition where Windows is installed, then browse to \Windows\System32\config, select SYSTEM and hit Open.
    type offsys for the key name and click ok.
    Then delete the registry key HKEY_LOCAL_MACHINE\offsys\ControlSet001\Services\WinDefend

    After that's done, close the registry editor.
    In the command prompt, type: (where X is the partition where windows is installed)
    cd /d X:\ProgramData\Microsoft
    rd "Windows Defender" /s /q

    close command prompt and click "exit and continue to windows 11"

    Hope this helps.
     
  3. LittlePro

    LittlePro MDL Senior Member

    Jan 19, 2017
    389
    138
    10
    #63 LittlePro, Nov 18, 2022
    Last edited: Nov 20, 2022
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. Super Spartan

    Super Spartan MDL Expert

    May 30, 2014
    1,737
    1,005
    60
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    4,155
    5,962
    150
    you can remove it live.
    you can moved the file's even if them in use.
    and marked them to delete later.
    I don't recommended doing so,
    I gave the warning, you are adults and have brain
    from now on, it's on you
     

    Attached Files:

    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. berr1sfueller

    berr1sfueller MDL Senior Member

    Nov 17, 2022
    413
    451
    10
    Technically you could, just meant cleanly. I mean go find the parent processes of defender files in use and kill em and delete the files if you so desire lol. Used to do this kinda fun stuff all the time.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. MDeaks

    MDeaks MDL Member

    Aug 25, 2017
    154
    74
    10
    I learned from these mistakes the HARD way…..
    Had to do format, fresh installs , grrrr…
     
  8. Konstantinos

    Konstantinos MDL Member

    Sep 8, 2012
    199
    79
    10
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. Ace2

    Ace2 MDL Expert

    Oct 10, 2014
    1,861
    1,521
    60
    sordum.org/9480/defender-control-v2-1
    sordum.org/10636/defender-exclusion-tool-v1-3
     
  10. Kim100

    Kim100 MDL Addicted

    Jun 17, 2009
    573
    299
    30
    Sordum produce some great little tools:)
     
  11. Super Spartan

    Super Spartan MDL Expert

    May 30, 2014
    1,737
    1,005
    60
    If you get an error message when you try to double click on the reg file, that means Windows Defender is not fully disabled and protecting the registry entries. Try running ToggleDefender to diable it, then reboot, then try double clicking on the registry file.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  12. zbigniew59

    zbigniew59 MDL Senior Member

    May 14, 2016
    373
    171
    10
    In order for Toogle Defender to work, you must first disable anti-corruption protection.

    The author of the script wrote.
     
  13. catosis

    catosis MDL Junior Member

    Apr 24, 2022
    87
    23
    0
    Is there an easy way to remove Defender and Edge from any given Windows install media?
    For instance on Windows 10 LTSC 2021 - update it to latest version available and remove Microsoft Edge and Windows Defender. The same with Windows 11 22H2 22621. I suppose it'd be similar?

    Thanks in advance!
     
  14. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    4,155
    5,962
    150
    using setupcomplete.cmd ? RunOnce ? AutoUnattend.xml ?
    it way easy ... than offline ...
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  15. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    4,155
    5,962
    150
    but if you insist ......

    Disable Telemetry in Windows 10 Enterprise / Education / LTSC / Server (Offline)

    * Updated 10-06-2022
    * Tested on Windows 10 19044/5 (LTSC) and Server 2022

    * The script disables Windows Defender, Windows Firewall & Windows Update and removes Microsoft Edge (You will need an alternate 3rd party Internet Security, Internet Browser and know how to manually update your OS)
    * The script disables Indexing and Search telemetry (This disables Windows Search in Windows Server. You will need an alternate 3rd party Search tool)
    * The script removes Microsoft Store and Apps (All ProvisionedAppxPackages)
    * The script removes "Diagtrack" & "dmwappushsrvice" Services and "CloudExperienceHost" SystemApp & Scheduled task which will prevent you from entering OOBE and thus not be able to complete Windows setup (An "unattend.xml" is included / needed to bypass OOBE and boot into the built-in Administrator account)


    https://forums.mydigitallife.net/threads/63874/page-66#post-1686849
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  16. HLP Mr. Lin Yu

    HLP Mr. Lin Yu MDL Junior Member

    Jul 22, 2022
    94
    46
    0
    #76 HLP Mr. Lin Yu, Mar 2, 2023
    Last edited: Mar 2, 2023
    I don't like the practice of binding Dead Defender and Edge in Windows. Is there any way to complete the migration of the two of them from iso imagine? After the installation is completed, I won't see the two of them at all?
     
  17. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    4,155
    5,962
    150
    Use Google translate
    This is not a Chinese forum :D
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  18. HLP Mr. Lin Yu

    HLP Mr. Lin Yu MDL Junior Member

    Jul 22, 2022
    94
    46
    0
    Sorry. It has been changed. I typed English and translated it into Chinese by Google. I didn't notice it.
     
  19. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    4,155
    5,962
    150
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  20. HLP Mr. Lin Yu

    HLP Mr. Lin Yu MDL Junior Member

    Jul 22, 2022
    94
    46
    0