Microsoft Defender auto-activates even though I am running MBAM Premium


Mark Phelps

Active member
Member
VIP
Local time
12:41 PM
Posts
217
OS
Windows 11
I'm running MBAM Premium version 4.5.9.198 and have all the protections turned on.

So I was surprised when Defender popup happened for a file I was downloading.

I checked Windows Security and Defender runtime checking was enabled -- so I disabled it and used gpedit.msc to do the same.

But ... if you are running a commercial AV product, isn't Defender supposed to be automatically disabled?
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Ryzen 5600X
    Motherboard
    ASRock Steel Legend
    Memory
    16GB
    Graphics Card(s)
    EVGA GT 710
    Sound Card
    None
    Monitor(s) Displays
    23",24", 19" - flat panels
    Screen Resolution
    1920x1200
    Hard Drives
    None - only M.2 SATA and NVMe drives
    PSU
    750W
    Case
    Antec
    Cooling
    stock Wraith cooler
    Keyboard
    Corsair gaming
    Mouse
    Logitech M720
    Internet Speed
    1Gb

ThrashZone

Minor Threat
Power User
VIP
Local time
11:41 AM
Posts
1,156
OS
Linux-Mint-Cinnamon-20.2 Win-7-10-11Pro's
Hi,
If you have mbam set to register with ms security center it shouldn't popup unless you have periodic scanning enabled in defender.
Defender/ ms security is pestware.

1654391023114.png
 

My Computer

System One

  • OS
    Linux-Mint-Cinnamon-20.2 Win-7-10-11Pro's
    Computer type
    PC/Desktop
    Manufacturer/Model
    asus x3
    CPU
    10900k & 9940x & 5930k
    Motherboard
    z490-Apex & x299-Apex & x99-Sabertooth
    Memory
    Trident-Z Royal 4000c16 2x16gb & Trident-Z 3600c16 4x8gb & 3200c14 4x8gb
    Graphics Card(s)
    Titan Xp & 1080ti FTW3 & evga 980ti gaming
    Sound Card
    Onboard Realtek x3
    Monitor(s) Displays
    1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
    Screen Resolution
    1920-1080 not sure what the t.v is besides 43" class scales from 1920-1080 perfectly
    Hard Drives
    To many to list
    PSU
    1000p2 & 1200p2 & 850p2
    Case
    D450 x2 & 1 Test bench in cherry Entertainment center
    Cooling
    Custom water loops x3 with 2x mora 360mm rads only 980ti gaming air cooled
    Keyboard
    G710+x3
    Mouse
    Redragon x3
    Internet Speed
    xfinity gigabyte
    Browser
    Firefox
    Antivirus
    mbam pro

WXC

Well-known member
Guru
VIP
Local time
11:41 AM
Posts
9,451
Location
U.S.A.
OS
Windows 10 Pro 64-bit 21H2 19044.2006
Hi,
If you have mbam set to register with ms security center it shouldn't popup unless you have periodic scanning enabled in defender.


@Mark Phelps


Hello, Mark.

@ThrashZone is correct in his reply to you (above).

Use limited periodic scanning in Microsoft Defender Antivirus


But interestingly, in Microsoft Community, the question was raised, and it was reported that it will still sometimes ask to run.

Microsoft Community


Just thought you might find the links interesting.


I can not personally verify the issue you described, as I have Windows Security set as primary AV, and do not have Malwarebytes Premium registered in the Security Center. This is what works best for me. Full benefit of real time protection, from both.


Take care.
 

My Computer

System One

  • OS
    Windows 10 Pro 64-bit 21H2 19044.2006
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell/Vostro 470 (Year 2012)
    CPU
    Intel i7-3770 @ 3.40GHz
    Memory
    8 GB
    Graphics Card(s)
    AMD 7500 Radeon HD Series
    Sound Card
    Realtek Hi-Def Audio
    Monitor(s) Displays
    Dell U2412M
    Hard Drives
    1 TB 7200 HDD
    Keyboard
    Dell/USB
    Mouse
    Dell/USB
    Internet Speed
    100/10
    Browser
    Edge
    Antivirus
    Windows Security/MalwareBytes Premium

ThrashZone

Minor Threat
Power User
VIP
Local time
11:41 AM
Posts
1,156
OS
Linux-Mint-Cinnamon-20.2 Win-7-10-11Pro's
Hi,
Yeah updates or at least some might come up with mbam not compatible enough to stay as main av so ms will switch it's self to main av

I get tiered of seeing wd icon with yellow flags just because it doesn't like my personal preferences.
I personally just disable wd with cmd as admin with this string and wd icon disappears completely :look:
To turn off tamper protection leave mbam registering off though otherwise mbam hijacks the setting from being changed in wd.

Code:
rem Disable Windows Defender. For this to work you have to manually disable "Tamper protection"
powershell "if ((Get-ItemProperty -Path 'HKLM:SOFTWARE\Microsoft\Windows Defender\Features').TamperProtection -eq 4) { exit 0; } ; Write-Output 'Windows Defender can not be disabled, Tamper Protection is still active' '' 'Disable Tamper Protection manually, then press OK' | msg /w *"
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Spynet" /v SpyNetReporting /t REG_DWORD /d 0 /f
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Spynet" /v SubmitSamplesConsent /t REG_DWORD /d 2 /f
reg add "HKLM\Software\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableRealtimeMonitoring /t REG_DWORD /d 1 /f
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer" /v SmartScreenEnabled /t REG_SZ /d "Off" /f
reg add "HKLM\Software\Policies\Microsoft\Windows Defender" /v DisableRoutinelyTakingAction /t REG_DWORD /d 1 /f
reg delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v SecurityHealth /f
 

My Computer

System One

  • OS
    Linux-Mint-Cinnamon-20.2 Win-7-10-11Pro's
    Computer type
    PC/Desktop
    Manufacturer/Model
    asus x3
    CPU
    10900k & 9940x & 5930k
    Motherboard
    z490-Apex & x299-Apex & x99-Sabertooth
    Memory
    Trident-Z Royal 4000c16 2x16gb & Trident-Z 3600c16 4x8gb & 3200c14 4x8gb
    Graphics Card(s)
    Titan Xp & 1080ti FTW3 & evga 980ti gaming
    Sound Card
    Onboard Realtek x3
    Monitor(s) Displays
    1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
    Screen Resolution
    1920-1080 not sure what the t.v is besides 43" class scales from 1920-1080 perfectly
    Hard Drives
    To many to list
    PSU
    1000p2 & 1200p2 & 850p2
    Case
    D450 x2 & 1 Test bench in cherry Entertainment center
    Cooling
    Custom water loops x3 with 2x mora 360mm rads only 980ti gaming air cooled
    Keyboard
    G710+x3
    Mouse
    Redragon x3
    Internet Speed
    xfinity gigabyte
    Browser
    Firefox
    Antivirus
    mbam pro

WXC

Well-known member
Guru
VIP
Local time
11:41 AM
Posts
9,451
Location
U.S.A.
OS
Windows 10 Pro 64-bit 21H2 19044.2006
Thank you for the Info, @ThrashZone.

Hopefully the OP will get things resolved.


(y)
 

My Computer

System One

  • OS
    Windows 10 Pro 64-bit 21H2 19044.2006
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell/Vostro 470 (Year 2012)
    CPU
    Intel i7-3770 @ 3.40GHz
    Memory
    8 GB
    Graphics Card(s)
    AMD 7500 Radeon HD Series
    Sound Card
    Realtek Hi-Def Audio
    Monitor(s) Displays
    Dell U2412M
    Hard Drives
    1 TB 7200 HDD
    Keyboard
    Dell/USB
    Mouse
    Dell/USB
    Internet Speed
    100/10
    Browser
    Edge
    Antivirus
    Windows Security/MalwareBytes Premium

Mark Phelps

Active member
Member
VIP
Thread Starter
Local time
12:41 PM
Posts
217
OS
Windows 11
Thanks for the replies -- so I checked and MBAM is set to Always register in the Windows Security Center.

I did use instructions from here to disabled Defender using Group Policy and so far today, it has NOT re-enabled on its own. So, maybe that is the way to disable it.

UPDATE: I just got a popup that Defender detected something -- and I checked, and it HAS turned itself back on!!

I will try the registry entries noted above and see if that works.
 
Last edited:

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Ryzen 5600X
    Motherboard
    ASRock Steel Legend
    Memory
    16GB
    Graphics Card(s)
    EVGA GT 710
    Sound Card
    None
    Monitor(s) Displays
    23",24", 19" - flat panels
    Screen Resolution
    1920x1200
    Hard Drives
    None - only M.2 SATA and NVMe drives
    PSU
    750W
    Case
    Antec
    Cooling
    stock Wraith cooler
    Keyboard
    Corsair gaming
    Mouse
    Logitech M720
    Internet Speed
    1Gb
  • Like
Reactions: WXC

glasskuter

Well-known member
Pro User
VIP
Local time
11:41 AM
Posts
2,539
Location
The Lone Star State of Texas
OS
Windows 11 Pro 22H2 22621.382
I have always run Defender and MWB in parallel. They play nice with each other without there being any excess load on my system. Since it is not detriment to my system to run both in real time, I figure twice the protection can't be bad.

Something I discovered about Defender is the same thing that has been around since Windows 7. I noticed Defender using more CPU than I thought it should so I had to add an exclusion to C:\Programdata\Microsoft\Windows Defender\Platform\x.xx.xxxx.x-x\MsMpEng.exe (where the x's is version number.) I restarted and CPU dropped to normal. That little quirk of Defender scanning itself has been around for years and MS still hasn't dealt with it.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 22H2 22621.382
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Optiplex 7080
    CPU
    i9-10900 10 core 20 threads
    Motherboard
    DELL 0J37VM
    Memory
    32 gb
    Graphics Card(s)
    none-Intel UHD Graphics 630
    Sound Card
    Integrated Realtek
    Monitor(s) Displays
    Benq 27
    Screen Resolution
    2560x1440
    Hard Drives
    256 m.2 2230-256+1 tb hdd
    PSU
    500w
    Case
    MT
    Cooling
    Dell Premium
    Keyboard
    Logitech wired
    Mouse
    Logitech wireless
    Internet Speed
    so slow I'm too embarrassed to tell
    Browser
    Firefox
    Antivirus
    Defender+MWB Premium
  • Operating System
    Windows 10 Pro 21H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Optiplex 9020
    CPU
    i7-4770
    Memory
    24 gb
    Monitor(s) Displays
    Benq 27
    Screen Resolution
    2560x1440
    Hard Drives
    256 gb Toshiba BG4 M.2 NVE SSB and 1 tb hdd
    PSU
    500w
    Case
    MT
    Cooling
    Dell factory
    Mouse
    Logitech wireless
    Keyboard
    Logitech wired
    Internet Speed
    still not telling
    Browser
    Firefox
    Antivirus
    Defender+MWB Premium

Mark Phelps

Active member
Member
VIP
Thread Starter
Local time
12:41 PM
Posts
217
OS
Windows 11
Update: Since using the registry entries from thread #4, Defender has NOT reactivated itself -- so maybe NOW, it is actually disabled for good.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Ryzen 5600X
    Motherboard
    ASRock Steel Legend
    Memory
    16GB
    Graphics Card(s)
    EVGA GT 710
    Sound Card
    None
    Monitor(s) Displays
    23",24", 19" - flat panels
    Screen Resolution
    1920x1200
    Hard Drives
    None - only M.2 SATA and NVMe drives
    PSU
    750W
    Case
    Antec
    Cooling
    stock Wraith cooler
    Keyboard
    Corsair gaming
    Mouse
    Logitech M720
    Internet Speed
    1Gb

The-Hive

The First Three Star Guru
Guru
VIP
Local time
5:41 PM
Posts
11,294
Location
Wiltshire UK
OS
Windows 11 Pro
Update: Since using the registry entries from thread #4, Defender has NOT reactivated itself -- so maybe NOW, it is actually disabled for good.
If you followed these guys advice you should be fine and shouldn't reactivate
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Alienware Area 51m R2
    CPU
    10th Gen Core i9 10900K
    Memory
    32GB
    Graphics Card(s)
    Geforce RTX 2080 Super
    Sound Card
    Nvidia HD
    Screen Resolution
    1920x1080
    Hard Drives
    C: Samsung 2TB P981A
    D: Samsung 2TB 970 Evo
    Case
    Dark side of the moon
    Mouse
    Alienware AW610M
    Browser
    Chrome and Firefox
    Antivirus
    Norton
    Other Info
    Killer E3000 Ethernet Controller
    Killer AX1650i Wi-Fi Network Adaptor
    Alienware Z01G Graphic Amplifier
    Tobii Eye Tracker
  • Operating System
    Dual Boot Windows 11 Pro / Windows 11 Pro Dev build
    Computer type
    Laptop
    Manufacturer/Model
    Dell Inspiron 3501
    CPU
    11th Gen i-7 2.80 gb
    Memory
    16Gb
    Screen Resolution
    1920 x 1080
    Hard Drives
    512Gb SSD
    WD 2GB EXT
    Browser
    Chrome
    Antivirus
    Norton

Haydon

Well-known member
Member
VIP
Local time
12:41 PM
Posts
982
OS
Windows 10 Pro
That little quirk of Defender scanning itself has been around for years and MS still hasn't dealt with it.
I thought it was a good thing that Defender makes sure that it is OK itself before it goes to work.
 

My Computer

System One

  • OS
    Windows 10 Pro

ThrashZone

Minor Threat
Power User
VIP
Local time
11:41 AM
Posts
1,156
OS
Linux-Mint-Cinnamon-20.2 Win-7-10-11Pro's
Update: Since using the registry entries from thread #4, Defender has NOT reactivated itself -- so maybe NOW, it is actually disabled for good.
Hi,
10 days so far has the bugger man got you yet for disabling pretender oops I mean defender :look:
 

My Computer

System One

  • OS
    Linux-Mint-Cinnamon-20.2 Win-7-10-11Pro's
    Computer type
    PC/Desktop
    Manufacturer/Model
    asus x3
    CPU
    10900k & 9940x & 5930k
    Motherboard
    z490-Apex & x299-Apex & x99-Sabertooth
    Memory
    Trident-Z Royal 4000c16 2x16gb & Trident-Z 3600c16 4x8gb & 3200c14 4x8gb
    Graphics Card(s)
    Titan Xp & 1080ti FTW3 & evga 980ti gaming
    Sound Card
    Onboard Realtek x3
    Monitor(s) Displays
    1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
    Screen Resolution
    1920-1080 not sure what the t.v is besides 43" class scales from 1920-1080 perfectly
    Hard Drives
    To many to list
    PSU
    1000p2 & 1200p2 & 850p2
    Case
    D450 x2 & 1 Test bench in cherry Entertainment center
    Cooling
    Custom water loops x3 with 2x mora 360mm rads only 980ti gaming air cooled
    Keyboard
    G710+x3
    Mouse
    Redragon x3
    Internet Speed
    xfinity gigabyte
    Browser
    Firefox
    Antivirus
    mbam pro

Mark Phelps

Active member
Member
VIP
Thread Starter
Local time
12:41 PM
Posts
217
OS
Windows 11
Hi,
10 days so far has the bugger man got you yet for disabling pretender oops I mean defender :look:
Actually, no. MBAM Premium runs a scan every day when I reboot and so far, has not found anything at all.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Ryzen 5600X
    Motherboard
    ASRock Steel Legend
    Memory
    16GB
    Graphics Card(s)
    EVGA GT 710
    Sound Card
    None
    Monitor(s) Displays
    23",24", 19" - flat panels
    Screen Resolution
    1920x1200
    Hard Drives
    None - only M.2 SATA and NVMe drives
    PSU
    750W
    Case
    Antec
    Cooling
    stock Wraith cooler
    Keyboard
    Corsair gaming
    Mouse
    Logitech M720
    Internet Speed
    1Gb
Top Bottom