Solved Windows 11 - Disable Windows Defender.


IanMosley

Active member
Member
Local time
9:36 PM
Posts
224
Location
Notts, UK
OS
Windows 11 Pro v 22H2 (Build 22621.382)
I have worked how to do this. However, I do not know how to manually disable 'Tamper Protection'; I've tried using the 'Settings' app without success.

Can anyone tell me how to do this?

Thank you.
 
Windows Build/Version
Windows 11 v 21H2 Release Preview (Build 22000.282) x64.

My Computer

System One

  • OS
    Windows 11 Pro v 22H2 (Build 22621.382)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3670
    CPU
    Intel(R) Core(TM) i5-8400 CPU @ 2.80GHz 2.81 GHz
    Motherboard
    64-bit operating system, x64-based processor
    Memory
    8.00 GB
    Graphics Card(s)
    Intel(R) UHD Grahics 630; NVIDIA Geforce GT 1030
    Monitor(s) Displays
    Dell P2714H Monitor
    Screen Resolution
    1920 x 1080
    Hard Drives
    1 x 1TB WDC WD10EZEX-75WN4A0 Internal HDD
    1 x 1TB Seagate STGX4000400 External HDD
    1 x 2TB Seagate STGX4000400 External HDD
    1 x 4TB Seagate STGX4000400 External HDD
    Keyboard
    Microsoft Wired Keyboard 600
    Mouse
    Microfoft USB Basic Optical Mouse v2.0
    Browser
    Firefox
    Antivirus
    Windows Defender + Malwarebytes

Ghot

Well-known member
Pro User
VIP
Local time
4:36 PM
Posts
3,496
Location
PA, USA
OS
Win 11 Home ♦♦♦22000.856

My Computers

System One System Two

  • OS
    Win 11 Home ♦♦♦22000.856
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    (onboard) Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    COOLER MASTER ATCS 840 Full Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    100/100
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Internet Security (latest)
    Other Info
    Speakers: Klipsch Pro Media 2.1
  • Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot®
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Mouse
    Logitech Optical M-BT96a
    Keyboard
    Logitech Classic Keybooard 200
    Internet Speed
    100/100
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 13 years?

    http://www.xtremesystems.org/forums/showthread.php?183088-5000-B-E-on-M2N32-SLI-Dlx-Overclocked&p=2891724#post2891724

IanMosley

Active member
Member
Thread Starter
Local time
9:36 PM
Posts
224
Location
Notts, UK
OS
Windows 11 Pro v 22H2 (Build 22621.382)
The link you provided does / will not work in Windows 11 - might though if I uninstall 'Malwarebytes'.

However, it does point to another tutorial which shows you how to do it manually.

Looks like it's going to be a busy weekend . . .

Thank you.
 

My Computer

System One

  • OS
    Windows 11 Pro v 22H2 (Build 22621.382)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3670
    CPU
    Intel(R) Core(TM) i5-8400 CPU @ 2.80GHz 2.81 GHz
    Motherboard
    64-bit operating system, x64-based processor
    Memory
    8.00 GB
    Graphics Card(s)
    Intel(R) UHD Grahics 630; NVIDIA Geforce GT 1030
    Monitor(s) Displays
    Dell P2714H Monitor
    Screen Resolution
    1920 x 1080
    Hard Drives
    1 x 1TB WDC WD10EZEX-75WN4A0 Internal HDD
    1 x 1TB Seagate STGX4000400 External HDD
    1 x 2TB Seagate STGX4000400 External HDD
    1 x 4TB Seagate STGX4000400 External HDD
    Keyboard
    Microsoft Wired Keyboard 600
    Mouse
    Microfoft USB Basic Optical Mouse v2.0
    Browser
    Firefox
    Antivirus
    Windows Defender + Malwarebytes

The-Hive

The First Three Star Guru
Guru
VIP
Local time
9:36 PM
Posts
10,503
Location
Wiltshire UK
OS
Windows 11 Pro
Just out of curiosity why would you want to disable tamper protection? surely that's a good thing.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Alienware Area 51m R2
    CPU
    10th Gen Core i9 10900K
    Memory
    32GB
    Graphics Card(s)
    Geforce RTX 2080 Super
    Sound Card
    Nvidia HD
    Screen Resolution
    1920x1080
    Hard Drives
    C: Samsung 2TB P981A
    D: Samsung 2TB 970 Evo
    Case
    Dark side of the moon
    Mouse
    Alienware AW610M
    Browser
    Chrome and Firefox
    Antivirus
    Norton
    Other Info
    Killer E3000 Ethernet Controller
    Killer AX1650i Wi-Fi Network Adaptor
    Alienware Z01G Graphic Amplifier
    Tobii Eye Tracker
  • Operating System
    Dual Boot Windows 11 Pro / Windows 11 Pro Dev build
    Computer type
    Laptop
    Manufacturer/Model
    Dell Inspiron 3501
    CPU
    11th Gen i-7 2.80 gb
    Memory
    16Gb
    Screen Resolution
    1920 x 1080
    Hard Drives
    512Gb SSD
    WD 2GB EXT
    Browser
    Chrome
    Antivirus
    Norton

IanMosley

Active member
Member
Thread Starter
Local time
9:36 PM
Posts
224
Location
Notts, UK
OS
Windows 11 Pro v 22H2 (Build 22621.382)
I use Malwarebytes to manage my protection -

A.png

and I don't see the point of continually dowloading Anti-Virus & Real Time Protection updates via WU if I'm not going to use them.
 

My Computer

System One

  • OS
    Windows 11 Pro v 22H2 (Build 22621.382)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3670
    CPU
    Intel(R) Core(TM) i5-8400 CPU @ 2.80GHz 2.81 GHz
    Motherboard
    64-bit operating system, x64-based processor
    Memory
    8.00 GB
    Graphics Card(s)
    Intel(R) UHD Grahics 630; NVIDIA Geforce GT 1030
    Monitor(s) Displays
    Dell P2714H Monitor
    Screen Resolution
    1920 x 1080
    Hard Drives
    1 x 1TB WDC WD10EZEX-75WN4A0 Internal HDD
    1 x 1TB Seagate STGX4000400 External HDD
    1 x 2TB Seagate STGX4000400 External HDD
    1 x 4TB Seagate STGX4000400 External HDD
    Keyboard
    Microsoft Wired Keyboard 600
    Mouse
    Microfoft USB Basic Optical Mouse v2.0
    Browser
    Firefox
    Antivirus
    Windows Defender + Malwarebytes

The-Hive

The First Three Star Guru
Guru
VIP
Local time
9:36 PM
Posts
10,503
Location
Wiltshire UK
OS
Windows 11 Pro
@IanMosley Thanks for info, I use Norton and it takes over from Defender and disables it automatically, if it didn't I think I would still let tamper protection carry on.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Alienware Area 51m R2
    CPU
    10th Gen Core i9 10900K
    Memory
    32GB
    Graphics Card(s)
    Geforce RTX 2080 Super
    Sound Card
    Nvidia HD
    Screen Resolution
    1920x1080
    Hard Drives
    C: Samsung 2TB P981A
    D: Samsung 2TB 970 Evo
    Case
    Dark side of the moon
    Mouse
    Alienware AW610M
    Browser
    Chrome and Firefox
    Antivirus
    Norton
    Other Info
    Killer E3000 Ethernet Controller
    Killer AX1650i Wi-Fi Network Adaptor
    Alienware Z01G Graphic Amplifier
    Tobii Eye Tracker
  • Operating System
    Dual Boot Windows 11 Pro / Windows 11 Pro Dev build
    Computer type
    Laptop
    Manufacturer/Model
    Dell Inspiron 3501
    CPU
    11th Gen i-7 2.80 gb
    Memory
    16Gb
    Screen Resolution
    1920 x 1080
    Hard Drives
    512Gb SSD
    WD 2GB EXT
    Browser
    Chrome
    Antivirus
    Norton

Ghot

Well-known member
Pro User
VIP
Local time
4:36 PM
Posts
3,496
Location
PA, USA
OS
Win 11 Home ♦♦♦22000.856
The link you provided does / will not work in Windows 11 - might though if I uninstall 'Malwarebytes'.

However, it does point to another tutorial which shows you how to do it manually.

Looks like it's going to be a busy weekend . . .

Thank you.


Ah well. Personally I do it with Autoruns.
I just disable 4 items, and then I can just disable the related Services.
I think it's way easier this way...


Just uncheck the four boxes shown, reboot, and then you can disable the Defender Services.
The bottom item (mpsdrv), is what makes it so hard to disable Defender.
It's a kernel mode driver. Aka, below Windows.
Until you disable that, nothing you do in Windows will completely work.

0000 Disable Defender.jpg
 

My Computers

System One System Two

  • OS
    Win 11 Home ♦♦♦22000.856
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    (onboard) Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    COOLER MASTER ATCS 840 Full Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    100/100
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Internet Security (latest)
    Other Info
    Speakers: Klipsch Pro Media 2.1
  • Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot®
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Mouse
    Logitech Optical M-BT96a
    Keyboard
    Logitech Classic Keybooard 200
    Internet Speed
    100/100
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 13 years?

    http://www.xtremesystems.org/forums/showthread.php?183088-5000-B-E-on-M2N32-SLI-Dlx-Overclocked&p=2891724#post2891724

Porthos

Active member
Member
VIP
Local time
3:36 PM
Posts
176
OS
Windows 10
I use Malwarebytes to manage my protection -
Malwarebytes has disabled Defender for the most part. It is better to have Both Malwarebytes and Defender on. To do that, you will have the following setting turned off in Malwarebytes.
1636131997931.png
The reason I push Keeping Defender on is the following.

Malwarebytes does not target script files during a scan... That means MB will not target; JS, HTML, VBS, .CLASS, SWF, BAT, CMD, PDF, PHP, etc.

It also does not target documents such as; PDF, DOC, DOCx, XLS, XLSx, PPT, PPS, ODF, etc.

It also does not target media files; MP3, WMV, JPG, GIF, etc.

Malwarebytes will detect files like these on execution-only.

And,

Malwarebytes is not designed to function like normal AV scanners and uses a new kind of scan engine that relies mostly on heuristics detection techniques rather than traditional threat signatures. Malwarebytes is also designed to look in all the locations where malware is known to install itself/hide, so a full or custom scan shouldn't be necessary, especially on any sort of frequent basis (like daily), especially since the default Threat Scan/Quick Scan checks all loading points/startup locations, the registry, all running processes and threads in memory, along with all system folders, program folders, and data folders as well as any installed browsers, caches, and temp locations. This also means that if a threat were active from a non-standard location because Malwarebytes checks all threads and processes in memory, it should still be detected. The only threat it *might* miss would be a dormant/inactive threat that is not actively running/installed on a secondary drive, however, if the threat were executed then Malwarebytes should detect it. Additionally, whenever a new location is discovered to be used by malware the Malwarebytes Research team adds that location dynamically to the outgoing database updates so the locations that are checked by the default Threat/Quick Scan in Malwarebytes can be changed on the fly by Research without requiring any engine or program version updates/upgrades.

An AV will catch the file just by downloading it or just opening a folder with a detected file in it.

For example, you get an email with an infected attachment, Malwarebytes will not even blink until you run it yet Defender will detect it if it is in their database without even actually clicking on it. Remember the list of files Malwarebytes does not target.

Then I will leave you with this.

As good as Malwarebytes is, it is just a layer of protection.

Using a browser that has Ublock Origin and the Malwarebytes Browser guard enabled is also a layer of protection.

Not opening attachments from an email unless you were expecting it from a specific user during a specific time period.

Do not use Torrents. Do not install every free software you find. Do not click links in an unknown email. Go directly to the site listed in the email.

Having a monthly image of your computer on an external drive that is only connected during the backup is actually better than any protective software ever made. Macrium Reflect free is the program I use and place on every computer I service.
 

My Computer

System One

  • OS
    Windows 10

Ghot

Well-known member
Pro User
VIP
Local time
4:36 PM
Posts
3,496
Location
PA, USA
OS
Win 11 Home ♦♦♦22000.856
@IanMosley


Here's what it looks like in Windows 11...

Image1.png


After unchecking the boxes shown below, and rebooting, the 2 Microsoft Defender and the Windows Defender Services are disabled.



Image1.png



Image3.png




/edit

Now I re-checked those four boxes in Autoruns, rebooted, and those three Services are running again.
Pretty simple. Took all of 2 minutes. :)

Note: I use Autoruns 13.98 ...the versions after 13.98 seem to be... gimped.

You have to do the three steps, shown in the pic in post #7
This is easy to test for yourself, and easily reversible.
It's so easy people shy away from it... thinking they must be missing something.

Almost forgot. It doesn't matter if you have a 3rd party AV/firewall, installed and/or running or not.


Autoruns 14.06 at Sysinternals <---- mpsdrv and mpssvc are blocked in this version. Aka, gimped, by MS no doubt.

Autoruns 13.98 <---- I use this version from this site.

Virustotal result <---- the one RED item is a false positive.
 
Last edited:

My Computers

System One System Two

  • OS
    Win 11 Home ♦♦♦22000.856
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    (onboard) Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    COOLER MASTER ATCS 840 Full Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    100/100
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Internet Security (latest)
    Other Info
    Speakers: Klipsch Pro Media 2.1
  • Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot®
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Mouse
    Logitech Optical M-BT96a
    Keyboard
    Logitech Classic Keybooard 200
    Internet Speed
    100/100
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 13 years?

    http://www.xtremesystems.org/forums/showthread.php?183088-5000-B-E-on-M2N32-SLI-Dlx-Overclocked&p=2891724#post2891724

IanMosley

Active member
Member
Thread Starter
Local time
9:36 PM
Posts
224
Location
Notts, UK
OS
Windows 11 Pro v 22H2 (Build 22621.382)

My Computer

System One

  • OS
    Windows 11 Pro v 22H2 (Build 22621.382)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3670
    CPU
    Intel(R) Core(TM) i5-8400 CPU @ 2.80GHz 2.81 GHz
    Motherboard
    64-bit operating system, x64-based processor
    Memory
    8.00 GB
    Graphics Card(s)
    Intel(R) UHD Grahics 630; NVIDIA Geforce GT 1030
    Monitor(s) Displays
    Dell P2714H Monitor
    Screen Resolution
    1920 x 1080
    Hard Drives
    1 x 1TB WDC WD10EZEX-75WN4A0 Internal HDD
    1 x 1TB Seagate STGX4000400 External HDD
    1 x 2TB Seagate STGX4000400 External HDD
    1 x 4TB Seagate STGX4000400 External HDD
    Keyboard
    Microsoft Wired Keyboard 600
    Mouse
    Microfoft USB Basic Optical Mouse v2.0
    Browser
    Firefox
    Antivirus
    Windows Defender + Malwarebytes

Dch48

Well-known member
Member
Local time
4:36 PM
Posts
455
Location
Upstate NY
OS
Windows 11 Home
I rely on Defender and the Windows firewall. I have the free version of Malwarebytes installed just for occasional on demand scans just as a checkup. In my opinion, that's all any home user needs. I also use the Edge Chromium browser with only one extension installed. AdGuard.
 

My Computers

System One System Two

  • OS
    Windows 11 Home
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    AMD Ryzen 5 5600X
    Motherboard
    MSI B550-A Pro
    Memory
    16 GB Corsair Vengeance LPX DDR4-3200
    Graphics Card(s)
    PowerColor Red Devil Radeon RX 6600XT with 8GB GDDR6
    Sound Card
    Realtek integrated
    Monitor(s) Displays
    Acer Nitro 24" RG241Y 144hz refresh rate
    Screen Resolution
    1920 X 1080
    Hard Drives
    Western Digital Black SN770 1 TB NVMe SSD
    Samsung 860 QVO 1 TB SATA SSD
    Seagate Barracuda 1 TB HDD
    PSU
    LEPA B650 650 watt
    Case
    Enermax Coenus
    Cooling
    Cooler Master Hyper T4 air
    Keyboard
    CM Storm Devastator
    Mouse
    E-Blue Cobra Jr.
    Internet Speed
    100mbs
    Browser
    Microsoft Edge Chromium
    Antivirus
    Microsoft Defender
    Other Info
    Optical Drives: LG DVD-RW and Pioneer BluRay/ DVD burner
  • Operating System
    Windows 11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Asus ROG Zephyrus G14
    CPU
    AMD Ryzen 9 6900HS
    Motherboard
    Asus board (GA402RK)
    Memory
    16 GB Samsung DDR5-4800
    Graphics card(s)
    Integrated Radeon 680M and discrete Radeon RX 6800S with 8GB GDDR6
    Sound Card
    Integrated Realtek with Dolby Atmos
    Monitor(s) Displays
    Laptop screen 14" WQXGA, IPS, 120hz refresh rate
    Screen Resolution
    2560 X 1600
    Hard Drives
    1TB PCIe Gen 4 SSD (WD Black SN850)
    PSU
    Battery power and Asus power brick/adapter. Also has USB-C charging
    Case
    Laptop
    Cooling
    Laptop fans in vapor chamber
    Mouse
    Touchpad and Omoton bluetooth mouse
    Keyboard
    Built in RGB backlit
    Internet Speed
    100mbps
    Browser
    Edge Chromium
    Antivirus
    Microsoft Defender
Top Bottom