I disabled defender but it is still working ! How I can stop it ?


William654

Well-known member
Member
VIP
Local time
11:52 AM
Posts
740
OS
Windows 11
Hi

I have another anitvirus and I want to stop defender so I stopped all the services but I found it is still working and deleted one of my files !! How I permanently stop defender ?

Here are the options I used:

1735133178612.webp

1735133222519.webp

1735133255301.webp

What is dev drive !!??
 

My Computer My Computer

At a glance

Windows 115900x32 GB G.SkillRX 6800 XT
OS
Windows 11
Computer type
PC/Desktop
CPU
5900x
Motherboard
MAG X570S TOMAHAWK MAX WIFI
Memory
32 GB G.Skill
Graphics Card(s)
RX 6800 XT
Sound Card
Creative Sound Blaster Z
Monitor(s) Displays
BENQ and AOC QHD 120Hz
Screen Resolution
QHD
Hard Drives
2TB Intel 660p and 2TB Sabrent Rokect 4 plus nvme, 4TB HDD HGST
PSU
Corsair RM750
Case
Bloody rage
Cooling
Water cooling gamdias 240
Keyboard
razer ornata
Mouse
razer da v2
Browser
FF and Chrome
Antivirus
Malwarebytes

My Computer My Computer

At a glance

Windows 11 Pro 25H212th Gen Core i7-1260P64 GB Micron PC4-25600Intel Iris Xe Graphics
OS
Windows 11 Pro 25H2
Computer type
PC/Desktop
Manufacturer/Model
Intel NUC12WSHi7
CPU
12th Gen Core i7-1260P
Motherboard
NUC12WSBi7
Memory
64 GB Micron PC4-25600
Graphics Card(s)
Intel Iris Xe Graphics
Sound Card
on-board Realtek HD Audio
Monitor(s) Displays
Dell U3219Q
Screen Resolution
3840 x 2160
Hard Drives
Samsung SSD 990 PRO 1TB
Crucial MX500 2 TB
Antivirus
Microsoft Defender

My Computer My Computer

At a glance

Windows 115900x32 GB G.SkillRX 6800 XT
OS
Windows 11
Computer type
PC/Desktop
CPU
5900x
Motherboard
MAG X570S TOMAHAWK MAX WIFI
Memory
32 GB G.Skill
Graphics Card(s)
RX 6800 XT
Sound Card
Creative Sound Blaster Z
Monitor(s) Displays
BENQ and AOC QHD 120Hz
Screen Resolution
QHD
Hard Drives
2TB Intel 660p and 2TB Sabrent Rokect 4 plus nvme, 4TB HDD HGST
PSU
Corsair RM750
Case
Bloody rage
Cooling
Water cooling gamdias 240
Keyboard
razer ornata
Mouse
razer da v2
Browser
FF and Chrome
Antivirus
Malwarebytes
this maybe of no help at all.
i have another antivirus AVG but have windows defender running in the background all seems to be working well together.

but you can have a look here.

and here.

best of luck, Steve ..
 

My Computers My Computers

  • At a glance

    Debian 13 KDE .. Windows 11 HomeRyzen 7 5825u64GB DDR4 3200Ryzen 7 5825u
    OS
    Debian 13 KDE .. Windows 11 Home
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP 24" AiO
    CPU
    Ryzen 7 5825u
    Motherboard
    HP
    Memory
    64GB DDR4 3200
    Graphics Card(s)
    Ryzen 7 5825u
    Sound Card
    RealTek
    Monitor(s) Displays
    24" HP AiO
    Screen Resolution
    1920 x 1080 @60 Hz
    Hard Drives
    1TB WD Blue SN580 M2 SSD Partitioned.
    2x 1TB USB HDD External Backup/Storage.
    PSU
    90W external power brick
    Case
    24" All in One
    Cooling
    Default Air Cooling
    Keyboard
    HP WiFi UK extended
    Mouse
    HP WiFi 3 Button
    Internet Speed
    1GB full fibre
    Browser
    Edge & Firefox
    Antivirus
    AVG Internet Security/Windows Defender
    Other Info
    Mainly Open Source Software
  • At a glance

    Ubuntu 22.04.5 LTSi5 7200u16GB DDR4Intel
    Operating System
    Ubuntu 22.04.5 LTS
    Computer type
    Laptop
    Manufacturer/Model
    Dell 13" Latitude 2017
    CPU
    i5 7200u
    Motherboard
    Dell
    Memory
    16GB DDR4
    Graphics card(s)
    Intel
    Sound Card
    Intel
    Monitor(s) Displays
    13" Dell Laptop
    Hard Drives
    250GB Crucial 2.5" SSD
    Mouse
    Generic WiFi 3 button
    Internet Speed
    WiFi only
    Browser
    Firefox
    Antivirus
    ClamAV TK
    Other Info
    Mainly Open Source Software
I disabled now defender using gpedit and restart my pc then I executed this:

Code:
PS C:\Users\user> Get-MpComputerStatus | select AMRunningMode

AMRunningMode
-------------
SxS Passive Mode

what passive mode mean ?
 

My Computer My Computer

At a glance

Windows 115900x32 GB G.SkillRX 6800 XT
OS
Windows 11
Computer type
PC/Desktop
CPU
5900x
Motherboard
MAG X570S TOMAHAWK MAX WIFI
Memory
32 GB G.Skill
Graphics Card(s)
RX 6800 XT
Sound Card
Creative Sound Blaster Z
Monitor(s) Displays
BENQ and AOC QHD 120Hz
Screen Resolution
QHD
Hard Drives
2TB Intel 660p and 2TB Sabrent Rokect 4 plus nvme, 4TB HDD HGST
PSU
Corsair RM750
Case
Bloody rage
Cooling
Water cooling gamdias 240
Keyboard
razer ornata
Mouse
razer da v2
Browser
FF and Chrome
Antivirus
Malwarebytes
so I stopped all the services
There is one new service called MDCoreSvc.
Code:
reg add "HKLM\System\CurrentControlSet\Services\MDCoreSvc" /v "Start" /t REG_DWORD /d "4" /f
reg add "HKLM\System\CurrentControlSet\Services\WdFilter" /v "Start" /t REG_DWORD /d "4" /f
reg add "HKLM\System\CurrentControlSet\Services\WdNisDrv" /v "Start" /t REG_DWORD /d "4" /f
reg add "HKLM\System\CurrentControlSet\Services\WdNisSvc" /v "Start" /t REG_DWORD /d "4" /f
reg add "HKLM\System\CurrentControlSet\Services\WinDefend" /v "Start" /t REG_DWORD /d "4" /f
But I suspect it was removed by smartscreen or smartappcontrol, they work independently on Defender.
P.S. You should click on Dismiss in all Settings to confirm you made the change, otherwise Windows might revert it.
 

My Computer My Computer

At a glance

Home26H2CanAMD Ryzen 5 8600G (07/24)2x32GB Kingston FURY DDR5 5600 MHz CL36 @5200...ASROCK Radeon RX 6600 Challenger D 8G @48FPS ...
OS
Home26H2Can
Computer type
PC/Desktop
CPU
AMD Ryzen 5 8600G (07/24)
Motherboard
ASROCK B650M-HDV/M.2 (07/24) BIOS 4.21 AGESA ComboAM5 1.3.0.1 (04/26)
Memory
2x32GB Kingston FURY DDR5 5600 MHz CL36 @5200 CL36 (07/24)
Graphics Card(s)
ASROCK Radeon RX 6600 Challenger D 8G @48FPS (08/24)
Sound Card
Creative Sound BlasterX AE-5 Plus (05/24)
Monitor(s) Displays
24" Philips 24M1N3200ZS/00 (05/24)
Screen Resolution
1920×1080@165Hz via DP1.4
Hard Drives
Kingston KC3000 NVMe 2TB (05/24)
ADATA XPG GAMMIX S11 Pro 512GB (07/19)
PSU
Seasonic Core GM 550 Gold (04/24)
Case
Fractal Design Define 7 Mini with 3x Noctua NF-P14s/12@555rpm (04/24)
Cooling
Noctua NH-U12S with Noctua NF-P12 (04/24)
Keyboard
HP Pavilion Wired Keyboard 300 (07/24) + Rabalux 76017 Parker (01/24)
Mouse
Logitech M330 Silent Plus (01/26)
Internet Speed
500/100 Mbps via RouterOS (05/21) & TCP Optimizer
Browser
Edge, Brave for YouTube, LibreWolf for FB
Antivirus
NextDNS blocking 1/3 Traffic
Other Info
Phone: Motorola Moto G86 (02/26)
Backup: Hasleo Backup Suite (PreOS)
Headphones: Sennheiser RS170 (09/10)
Chair: Huzaro Force 4.4 Grey Mesh (05/24)
Notifier: Xiaomi Mi Band 9 Milanese (10/24)
FlexCore USB-C 3.2 Gen 1 (M) to LAN (F) (08/25)
P.S. You should click on Dismiss in all Settings to confirm you made the change, otherwise Windows might revert it.
Yes this happen now . turn off defender become "not configured" . Where is dismiss all settings ?

1735136096846.webp
 

My Computer My Computer

At a glance

Windows 115900x32 GB G.SkillRX 6800 XT
OS
Windows 11
Computer type
PC/Desktop
CPU
5900x
Motherboard
MAG X570S TOMAHAWK MAX WIFI
Memory
32 GB G.Skill
Graphics Card(s)
RX 6800 XT
Sound Card
Creative Sound Blaster Z
Monitor(s) Displays
BENQ and AOC QHD 120Hz
Screen Resolution
QHD
Hard Drives
2TB Intel 660p and 2TB Sabrent Rokect 4 plus nvme, 4TB HDD HGST
PSU
Corsair RM750
Case
Bloody rage
Cooling
Water cooling gamdias 240
Keyboard
razer ornata
Mouse
razer da v2
Browser
FF and Chrome
Antivirus
Malwarebytes
Where is dismiss all settings ?
In your screenshots, it has to be done manually otherwise it looks to Windows as if an app or a malware made the change.
 

My Computer My Computer

At a glance

Home26H2CanAMD Ryzen 5 8600G (07/24)2x32GB Kingston FURY DDR5 5600 MHz CL36 @5200...ASROCK Radeon RX 6600 Challenger D 8G @48FPS ...
OS
Home26H2Can
Computer type
PC/Desktop
CPU
AMD Ryzen 5 8600G (07/24)
Motherboard
ASROCK B650M-HDV/M.2 (07/24) BIOS 4.21 AGESA ComboAM5 1.3.0.1 (04/26)
Memory
2x32GB Kingston FURY DDR5 5600 MHz CL36 @5200 CL36 (07/24)
Graphics Card(s)
ASROCK Radeon RX 6600 Challenger D 8G @48FPS (08/24)
Sound Card
Creative Sound BlasterX AE-5 Plus (05/24)
Monitor(s) Displays
24" Philips 24M1N3200ZS/00 (05/24)
Screen Resolution
1920×1080@165Hz via DP1.4
Hard Drives
Kingston KC3000 NVMe 2TB (05/24)
ADATA XPG GAMMIX S11 Pro 512GB (07/19)
PSU
Seasonic Core GM 550 Gold (04/24)
Case
Fractal Design Define 7 Mini with 3x Noctua NF-P14s/12@555rpm (04/24)
Cooling
Noctua NH-U12S with Noctua NF-P12 (04/24)
Keyboard
HP Pavilion Wired Keyboard 300 (07/24) + Rabalux 76017 Parker (01/24)
Mouse
Logitech M330 Silent Plus (01/26)
Internet Speed
500/100 Mbps via RouterOS (05/21) & TCP Optimizer
Browser
Edge, Brave for YouTube, LibreWolf for FB
Antivirus
NextDNS blocking 1/3 Traffic
Other Info
Phone: Motorola Moto G86 (02/26)
Backup: Hasleo Backup Suite (PreOS)
Headphones: Sennheiser RS170 (09/10)
Chair: Huzaro Force 4.4 Grey Mesh (05/24)
Notifier: Xiaomi Mi Band 9 Milanese (10/24)
FlexCore USB-C 3.2 Gen 1 (M) to LAN (F) (08/25)
In your screenshots, it has to be done manually otherwise it looks to Windows as if an app or a malware made the change.
sorry I dont understand. I change it manually but it keep return to "not configured" after restart
 

My Computer My Computer

At a glance

Windows 115900x32 GB G.SkillRX 6800 XT
OS
Windows 11
Computer type
PC/Desktop
CPU
5900x
Motherboard
MAG X570S TOMAHAWK MAX WIFI
Memory
32 GB G.Skill
Graphics Card(s)
RX 6800 XT
Sound Card
Creative Sound Blaster Z
Monitor(s) Displays
BENQ and AOC QHD 120Hz
Screen Resolution
QHD
Hard Drives
2TB Intel 660p and 2TB Sabrent Rokect 4 plus nvme, 4TB HDD HGST
PSU
Corsair RM750
Case
Bloody rage
Cooling
Water cooling gamdias 240
Keyboard
razer ornata
Mouse
razer da v2
Browser
FF and Chrome
Antivirus
Malwarebytes
I used now the registry method and it say not running

Code:
AMRunningMode
-------------
Not running
 

My Computer My Computer

At a glance

Windows 115900x32 GB G.SkillRX 6800 XT
OS
Windows 11
Computer type
PC/Desktop
CPU
5900x
Motherboard
MAG X570S TOMAHAWK MAX WIFI
Memory
32 GB G.Skill
Graphics Card(s)
RX 6800 XT
Sound Card
Creative Sound Blaster Z
Monitor(s) Displays
BENQ and AOC QHD 120Hz
Screen Resolution
QHD
Hard Drives
2TB Intel 660p and 2TB Sabrent Rokect 4 plus nvme, 4TB HDD HGST
PSU
Corsair RM750
Case
Bloody rage
Cooling
Water cooling gamdias 240
Keyboard
razer ornata
Mouse
razer da v2
Browser
FF and Chrome
Antivirus
Malwarebytes

Latest Support Threads

Back
Top Bottom