Windows Defender - The worst AV ever?

Discussion in 'Application Software' started by Windows_Addict, Feb 7, 2020.

  1. xinso

    xinso MDL Guru

    Mar 5, 2009
    12,695
    13,692
    340
    #261 xinso, May 3, 2022
    Last edited: May 3, 2022
    From 18262.1 forward, LCU reinstalls system mum files and updates accordingly. If some initial package(s) or component(s) being tampered or missing, update failed.

    To conquer it, use
    Option 1: Group policy to disable;
    Option 2: Custom update to remove;
    Option 3: Server (Client Workstation) to choose.

    Hint:
    CMGE uses
    https://forums.mydigitallife.net/threads/windows-10-global-edition-vs-china-government.80933/

    Old builds, Group policy.
    19044 build, Product policy.
    Code:
    Microsoft-Windows-Defender-AntivirusAllowed    0
    
     
  2. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,219
    120
    #262 Dark Dinosaur, May 3, 2022
    Last edited: May 3, 2022
    now I going to try something else.

    Remove Service / Remove packages --- keep folders.
    ~ Failed

    Remove packages / Remove folders --- Keep services
    ~ Failed

    Remove packages --- Keep folders, Keep services
    ~ Failed
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. xinso

    xinso MDL Guru

    Mar 5, 2009
    12,695
    13,692
    340
    #263 xinso, May 3, 2022
    Last edited: May 3, 2022
    Gonna be hardly possible. Good luck.
     
  4. exslim

    exslim MDL Novice

    Mar 10, 2022
    6
    5
    0
    What is the best, safe, transparent way to disable Windows 10 AV? Is that script from Major Geeks all right?
     
  5. Mr.X

    Mr.X MDL Guru

    Jul 14, 2013
    8,575
    15,646
    270
  6. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,219
    120
    #266 Dark Dinosaur, May 5, 2022
    Last edited: May 5, 2022
    Just downloaded randomiser pack
    Let's test them on this s**ti a/v
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,219
    120
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. Mallymkun

    Mallymkun MDL Novice

    Feb 12, 2020
    1
    0
    0
    Dark Dinosaur I`m also trying to find a way to uninstall Windows Defender and have possibility to install Windows updates, like it was on 1607, 1809. But since Windows 10 2004, changing of Visibility property for Windows package and remove it with dism /Remove-Package, gives error when installing new Windows update, doesn`t matter how, thru the Windows update itself or using dism and downloaded package.
     
  9. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,219
    120
    Just disable it service
    And set disable antispywayware / Tampar protection key
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  10. catosis

    catosis MDL Junior Member

    Apr 24, 2022
    81
    20
    0
    What's the latest W10 that need not disabling tamper protection? Last MSDN 19044.1645?
    How can I add your script to install media so freshly installed Windows will have its AV permanently disabled?
     
  11. patapout

    patapout MDL Member

    Jun 23, 2014
    177
    93
    10
    #271 patapout, Jun 8, 2022
    Last edited: Jun 8, 2022
    I just tried your "ToggleDefender" successfully on fresh install of win11 22000.675...(and on win10 19044.1706)
    Very simple and I can switch on/off when I want :)
    +1
     
  12. kompassorpigo

    kompassorpigo MDL Member

    Jun 22, 2016
    122
    23
    10
    AV is badness enumeration making it futile.
    Defender's strength lie in other things than the AV aspect of it.
    Other AVs.. are just AVs and thus useless.
     
  13. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,219
    120
    #273 Dark Dinosaur, Jul 9, 2022
    Last edited: Jul 16, 2022
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  14. itsmemario1

    itsmemario1 MDL Expert

    Sep 10, 2012
    1,047
    280
    60
  15. Windows_Addict

    Windows_Addict MDL Expert

    Jul 19, 2018
    1,255
    3,455
    60
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  16. Windows_Addict

    Windows_Addict MDL Expert

    Jul 19, 2018
    1,255
    3,455
    60
    @itsmemario1

    Exclusion from detection:

    A program can add itself or any directory to Windows defender exclusions and execute all the malicious things they want and the defender won't warn anything.

    Antivirus self-protection:

    Before February 2022, we were able to kill the whole Window Defender without any warnings from the defender even with Temper protection ON.
    Now they have upped it a bit but still, we can kill defender but a restart would be required, it's when Temper protection in ON.

    ----------------

    Can we do such things with such an easy effort with any other well known antivirus?
    No, let me know if you find one.

    ----------------

    You can't really compare these elephant size security holes in Defender with other AV's cve and say that, look they are all the same. They are not.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  17. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,219
    120
    #278 Dark Dinosaur, Jul 16, 2022
    Last edited: Jul 16, 2022
    The best way to bypass this s**t.
    [don't abuse, only for learning. I will not share things if I find out .. ]
    Code:
    1- 2>nul powershell -nop -c "Set-MpPreference -ExclusionPath 'path_1', 'path_2', 'path_3'"  (your path-s- !)
    2- Use aveyo "Compressed 2 TXT" tool to Save & Extract the files to your folder
       Use Compressed RAR with PASSWORD & Encrypted names & use Unrar tool to extract
    3- Run the files. remove files.
    4- 2>nul powershell -nop -c "Remove-MpPreference -ExclusionPath 'path_1', 'path_2', 'path_3'"  (your path-s- !)
    
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  18. Windows_Addict

    Windows_Addict MDL Expert

    Jul 19, 2018
    1,255
    3,455
    60
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  19. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,219
    120
    #280 Dark Dinosaur, Jul 16, 2022
    Last edited: Jul 16, 2022
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...