Video Guide: How to completely Disable Microsoft Defender Antivirus

Spartan · May 3, 2023

Brink · May 3, 2023

Enable or Disable Microsoft Defender Antivirus in Windows 11 Tutorial

This tutorial will show you how to enable or disable Microsoft Defender Antivirus in Windows 11. Microsoft Defender Antivirus is an antivirus software that is included in Windows 11 and can help protect your device from viruses, malware, and other threats. You must be signed in as an...

www.elevenforum.com

Kick · May 3, 2023

Maybe a dumb question but why would you do that?

OAT · May 3, 2023

AV-TEST confirms Windows Defender is amongst the very finest antiviruses you get in 2021

German security research institute AV-TEST has released its October 2021 Windows 10 report for anti-virus assessment. Among the programs tested here, Microsoft's Windows Defender has done very well.

www.neowin.net

FreeBooter · May 3, 2023

In this video, i will guide you on how to disable Windows Defender in Windows 11.

Kick · May 3, 2023

I really seem to missing the point here... Why?

Spartan · May 3, 2023

Kick said:
I really seem to missing the point here... Why?

If you want to install another security solution. Don't think that Windows Defender will automatically disable itself and all its layers if you simply install another security solution. It will deactivate real time scanning but its services are still running in the background.

Why choose another security solution? I'll let the image speak for itself: AV-C Performance Test

AV Comparatives Performance Tests OCT-22.png

LesFerch · May 3, 2023

Kick said:
I really seem to missing the point here... Why?

In general, you shouldn't have to permanently disable Windows Defender. If you choose to use a different AV, it's installer will disable Windows Defender (and re-enable Defender upon uninstall). And if it's a machine set up for some special purpose (maybe where maximum performance is needed), and doesn't need AV (maybe it's totally offline), just disabling Windows Defender's real time protection should be sufficient.

I can't think of any common scenario where Windows Defender really needs to be disabled, but I'm sure there are some niche reasons.

Edit: I see from Spartan's answer that other AV solutions may not totally disable all Windows Defender services. That's something I've never checked closely. Good to know.

Related story...

Once, I had a weird issue where Windows Defender started quarantining a script that I had written and used many times before. The same script was fine on all other computers using the same version of Windows and Windows Defender definitions. I should have just done a Windows repair install, but I thought it would be interesting to see if I could completely remove and reinstall Windows Defender. I used this removal tool which totally removed Windows Defender. But it was so well removed, I couldn't reinstall it. Doh! I then did the Windows repair install which brought back Defender, but it failed to start up. Doh! again. A second Windows repair install got everything back to normal and the issue with the script was gone.

OAT · May 3, 2023

Spartan said:
Why choose another security solution? I'll let the image speak for itself: AV-C Performance Test

What about showing us the screen on the protection performance evaluation?
OK, let me do it for you...

Who cares about performance impact if your system is well-protected.

LesFerch · May 3, 2023

@Spartan I wouldn't take that chart at face value. Be sure to do your own tests with your own preferred security options. I've seen charts like this many times over the decades and they've always been misleading.

LesFerch · May 3, 2023

OAT said:
Who cares about performance impact if your system is well-protected.

No! We must care! If the computer is so bogged down by security software that we can't work effectively (or run a game smoothly) it defeats the purpose of having a computer.

OAT · May 3, 2023

No! We must care! If the computer is so bogged down by security software that we can't work effectively (or run a game smoothly) it defeats the purpose of having a computer.

If your computer is bogged down by MS AV software, your system is inadequate and shouldn't run Windows 11.
But since you have not deemed it necessary to bother to post your specs, we'll never know.

LesFerch · May 3, 2023

OAT said:
If your computer is bogged down by MS AV software, your system is inadequate and shouldn't run Windows 11.

In general, I'm sure that true. I'm using a laptop from 2012 with Windows Defender and I have no issues, but performance must always be considered. Each use case differs.

When I worked at a major bank, the computer hardware upgrades couldn't keep up with the performance hit brought on by ever increasing security software demands. Users who took a laptop home for the weekend would come back on Monday and have to endure up to a 30 minute wait before their machine was fully scanned and ready to use. Yes, this was 15 years ago and things have changed, but even today, with the fastest machines, users can encounter serious performance issues (e.g. File Explorer in Windows 11).

ShamrockRig · May 3, 2023

Well heres one, Personally i don't use any AV at all, Windows defender stuff etc is all off. Why you may ask? I personally dont need it, The best AV is the one between you're ears. I know how to keep my house in order without it and touch wood, had more virus's back in the day with av's installed than i do now without it( 0 yes really 0) and thats maybe been since 2016 or so.

kelper · May 3, 2023

I know Apple has its Fanbois, but I am amazed at the quasi-religious belief in Microsoft Defender. I use Webroot. It is not on the AV testing sites because it operates in a different way. It's tiny, installs in a flash and has never let me down. You will never hear from it unless it is warning you of a dodgy website. It only leaps into action if it detects malicious activity and its journaling feature can roll back any changes, even ransomware/encryption.Who cares about performance impact if your system is well-protected

kelper · May 3, 2023

OAT said:
Who cares about performance impact if your system is well-protected.

I do. Why use an AV that slows your computer down if there is a good alternative that doesn't?

OAT · May 3, 2023

kelper said:
I do. Why use an AV that slows your computer down if there is a good alternative that doesn't?

Point well taken.

Spartan · May 3, 2023

OAT said:
What about showing us the screen on the protection performance evaluation?
OK, let me do it for you...

View attachment 59292
Who cares about performance impact if your system is well-protected.

in terms of protection, we have reached where all AVs are good and very close to each other. Now it comes down to, having an AV with no bloatware like system optimizers, toolbars, etc, and one that doesn't affect performance.

Who cares about performance? Excuse me? What kind of statement is that? Everybody should care about performance to get the best out of their hardware while still being protected. Plus, this is not an A vs B thread. If you want to use Microsoft Defender, be my guest. This thread is for people who want to disable it completely. Plain and simple.

PS: and here's the link about protection you asked for: Comparison

OAT · May 3, 2023

Spartan said:
This thread is for people who want to disable it completely. Plain and simple.

Good luck gathering the crowd then.

I suspect the expression of not caring about performance was a bit over the top; I give you that.
~~Talking about performance, please kindly modify your thread title with the word Video so we don't waste our time trying to help somebody worthy of it.~~
Thank you.

bob3d · May 3, 2023

The following code (which I did NOT compose) was highly useful in disabling Windows Defender for me. I got it from one of Freebooter's videos:

Code:

:: How to Permanently Disable Windows Defender Antivirus in Windows 11
@Echo Off & Cls
net sess>nul 2>&1||(powershell start cmd -ArgumentList """/c %~0""" -verb Runas & exit)
:_Start
Cls & Mode CON  LINES=11 COLS=60 & Color 0E &Title Created By FreeBooter
Echo.
Echo.      
Echo         Type (D) letter to Disable Windows Defender
Echo.      
Echo.        
Echo         Type (E) letter to Enable Windows Defender  
Echo.      
Set /p input=^>
If /i  Not %input%==D (Goto :_Ex) Else (Goto :_Disable)
:_Ex
If /i  Not %input%==E  (Goto :_Start) Else (Goto :_Enable)
:_Disable
PowerShell Checkpoint-Computer -Description "Enable Windows Defender" -RestorePointType "MODIFY_SETTINGS"
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t REG_DWORD /d "1" /f
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableRealtimeMonitoring" /t REG_DWORD /d "1" /f
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiVirus" /t REG_DWORD /d "1" /f
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableSpecialRunningModes" /t REG_DWORD /d "1" /f
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableRoutinelyTakingAction" /t REG_DWORD /d "1" /f
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "ServiceKeepAlive" /t REG_DWORD /d "0" /f
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "ServiceStartStates" /t REG_DWORD /d "1" /f
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableBehaviorMonitoring" /t REG_DWORD /d "1" /f
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableOnAccessProtection" /t REG_DWORD /d "1" /f
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableScanOnRealtimeEnable" /t REG_DWORD /d "1" /f
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableRealtimeMonitoring" /t REG_DWORD /d "1" /f
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Signature Updates" /v "ForceUpdateFromMU" /t REG_DWORD /d "0" /f
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /v "DisableBlockAtFirstSeen" /t REG_DWORD /d "1" /f
Cls & Mode CON  LINES=5 COLS=48 & Color 04 & Title - WARNING -
 Echo.
 Echo.
 Echo            Windows Defender Disabled
Ping -n 5  localhost > Nul
Goto :Reboot
:_Enable
 Reg.exe delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware"  /f
Reg.exe delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableRealtimeMonitoring"  /f
Reg.exe delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiVirus"  /f
Reg.exe delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableSpecialRunningModes" /f
Reg.exe delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableRoutinelyTakingAction"  /f
Reg.exe delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "ServiceKeepAlive" /f
Reg.exe delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "ServiceStartStates" /f
Reg.exe delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /f
Reg.exe delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Signature Updates"  /f
Reg.exe delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet"  /f
Cls & Mode CON  LINES=5 COLS=48 & Color E0 & Title - WARNING -
 Echo.
 Echo.
 Echo            Windows Defender Enabled
Ping -n 5  localhost > Nul
:Reboot
Cls & Mode CON  LINES=11 COLS=42 & Color 0E & Title FreeBooter
Echo.
Echo.
Echo    THIS COMPUTER WILL REBOOT
Echo.
Echo.
Echo    PLEASE SAVE ALL WORK IN PROGRESS
Echo.
Echo.
Echo    PRESS 'ENTER' KEY TO RESTART COMPUTER
Pause >Nul
Shutdown  -r  -t 5  -c "REBOOTING SYSTEM" 2>&1 > Nul
Exit

After doing this, I went to Windows\System32\smartscreen.exe and renamed it smartscreen.exe.old since it is part of WIndows Defender and would still run even after all of the above had been performed.

Now I just have my Antivirus of my choice running without having Windows Defender running in the background.

bob