How to properly disable Win Defender on Win11 22H2

flashh4 said:

How to Turn On or Off Microsoft Defender Antivirus in Windows 10

This tutorial will show you how to completely turn on or off Microsoft Defender Antivirus for all users in Windows 10.

www.tenforums.com

Enable or Disable Microsoft Defender Antivirus in Windows 11 Tutorial

This tutorial will show you how to enable or disable Microsoft Defender Antivirus in Windows 11. Microsoft Defender Antivirus is an antivirus software that is included in Windows 11 and can help protect your device from viruses, malware, and other threats. You must be signed in as an...

www.elevenforum.com

Click to expand...

flashh4 said:

Basically this is how it was but now good luck with that lol

Click to expand...

Wolfzz said:

I use this one its great gives you the option to disable or remove it completely

GitHub - ionuttbara/windows-defender-remover: A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11.

A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11. - ionuttbara/windows-defender-remover

github.com

Click to expand...

since 22h2, it's not able to remove defender without breaking winstore and it lacks instructions and some of the services still stay running

TairikuOkami said:

Yes, updated, disabled.

Click to expand...

Those weren't executed I guess

ian50 said:

@Wolfzz

​

Does the GitHub application you linked to survive re-boots when installed ?

Click to expand...

It only reboots once after you run it then I run Microsoft Autoruns v14.10 and remove ticks or delete any left over defender reg files.
Then I do one more reboot

@raptorex, you Can Not remove Defender it is built into Windows & has been for awhile !!

flashh4 said:

@raptorex, you Can Not remove Defender it is built into Windows & has been for awhile !!

Click to expand...

The tool you provided (defender remover) actually used to remove all the components not just disabling them and registries but since 22h2, it can no longer do that. Plus, i'm not trying to remove it but properly disable as many related background process as possible

@Wolfzz

"It only reboots once after you run it then I run Microsoft Autoruns v14.10 and remove ticks or delete any left over defender reg files.
Then I do one more reboot"

Yes, I know it requires a reboot after installation. I've been using it on one of my two Win11 machines for 3-4 days now. To my knowledge Defender hasn't resurrected itself, but I haven't used Autoruns as yet. When I do, what am I looking for ?

I was really asking if you've experienced any resurrection symptoms as yet ?

(BTW, I'm on the 22621.2027 build of 22H2)

​

ian50 said:

@Wolfzz

"It only reboots once after you run it then I run Microsoft Autoruns v14.10 and remove ticks or delete any left over defender reg files.
Then I do one more reboot"

Yes, I know it requires a reboot after installation. I've been using it on one of my two Win11 machines for 3-4 days now. To my knowledge Defender hasn't resurrected itself, but I haven't used Autoruns as yet. When I do, what am I looking for ?

I was really asking if you've experienced any resurrection symptoms as yet ?

(BTW, I'm on the 22621.2027 build of 22H2)

​

Click to expand...

Just run Microsoft Autoruns and up the top in the search box called Quick Filter just type in Defender and it will show what's left in your computer.
I have had no ill affects once its gone. I then just installed Kaspersky after which uses less resources than Defender.
I have used this program on all versions of Win 10 and Win 11 without a issue. Good Luck

@Wolfzz

Thanks for that help. I used Autoruns - found only Context Menu item left. I've rebooted, shut down and restarted quite a few times since I installed the GitHub programme, so it seems to work ok.

I'm using BitDefender (current freeware version) which is generally better behaved and less a resource drag than MS Defender, although it (BitDefender) can be cantankerous sometimes. Also using Free Firewall (similar to TinyWall) to block outgoing "phone homes" until I let them out.

@Wolfzz

I should have added that when I installed the GitHib programme, I chose DISABLE, not DELETE. If this programme eventually gives problems, MS Defender can be restored quite simply.

ian50 said:

@Wolfzz

I should have added that when I installed the GitHib programme, I chose DISABLE, not DELETE. If this programme eventually gives problems, MS Defender can be restored quite simply.

Click to expand...

Excellent, I would of just Disabled it just in case. Glad you did as you can restore it at a later date if you need too.

TairikuOkami said:

Run - msconfig - Boot - Safe Boot - Minimal - Restart

Code:

reg add "HKLM\System\CurrentControlSet\Services\WdFilter" /v "Start" /t REG_DWORD /d "4" /f
reg add "HKLM\System\CurrentControlSet\Services\WdNisDrv" /v "Start" /t REG_DWORD /d "4" /f
reg add "HKLM\System\CurrentControlSet\Services\WdNisSvc" /v "Start" /t REG_DWORD /d "4" /f
reg add "HKLM\System\CurrentControlSet\Services\WinDefend" /v "Start" /t REG_DWORD /d "4" /f

Restart - Run - msconfig - General - Normal Startup - Defender is gone

Click to expand...

Hello is there any cmd commands to return from before they were added?

This to me is still the easiest way to disable or re-enable Windows Defender.

Wolfzz said:

This to me is still the easiest way to disable or re-enable Windows Defender.

GitHub - ionuttbara/windows-defender-remover: A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11.

A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11. - ionuttbara/windows-defender-remover

github.com

Click to expand...

Or I'm doing something wrong but this tool doesn't work for me. Only these commands disable the defender in emergency mode

kami7 said:

Or I'm doing something wrong but this tool doesn't work for me. Only these commands disable the defender in emergency mode

Click to expand...

I manually turn off all Defender options first especially tamper protection before I run it.

Choose Privacy & security, Windows Security, then Virus & threat protection
Under Virus & threat protection settings, click on Manage settings
Scroll down to the Tamper Protection option, and toggle the slider to Off

Wolfzz said:

I manually turn off all Defender options first especially tamper protection before I run it.

Click to expand...

Wolfzz said:

I manually turn off all Defender options first especially tamper protection before I run it.

Choose Privacy & security, Windows Security, then Virus & threat protection
Under Virus & threat protection settings, click on Manage settings
Scroll down to the Tamper Protection option, and toggle the slider to Off

Click to expand...

The first procedure was to disable all Defender functions. But I forgot one thing to run scrypt as admin. I think the problem has been solved. Defender has been disabled. Thanks for your help. Greetings

kami7 said:

Hello is there any cmd commands to return from before they were added?

Click to expand...

You can just replace 4 with 2 or you can run this:

TairikuOkami said:

You can just replace 4 with 2 or you can run this:

Windows/Microsoft Defender Enable.bat at main · TairikuOokami/Windows

Windows. Contribute to TairikuOokami/Windows development by creating an account on GitHub.

github.com

Click to expand...

Thanks!

Wolfzz said:

This to me is still the easiest way to disable or re-enable Windows Defender.

GitHub - ionuttbara/windows-defender-remover: A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11.

A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11. - ionuttbara/windows-defender-remover

github.com

Click to expand...

Thank you are a Life saver.

GitHub - ionuttbara/windows-defender-remover: A tool which is uses to remove Wi​

Now this application will be detected as Virus from Defender on Win 11 Home 22H2