Windows Defender disabler,removers

cheaterslick said:

I thought about using that tool, but the following warning comes from Sordum:

Click to expand...

DJNelson said:

First thread I came to, as I've come to the conclusion that Microsoft is primarily interested in invading your privacy, but does almost nothing to stop malware. I have completely removed Defender, Smartscreen, Edge, disabled all updates, and shut off the Waasmedicsvc, because I got really tired of driveby downloads from windows update breaking my applications. Funny thing is, 6 months in, and my system still boots in less than 3 seconds. Creating a stable OS is an apparent conflict of profit interest for MS. If you want your system to be stable and reliable, you have to do it yourself.

Click to expand...

DJNelson said:

Wise advice. Why trust random tools to remove things when it can be done manually by taking ownership of files and registry keys and giving yourself permission to delete them. Also don't change anything critical to windows unless you know exactly what will happen when you do.

Click to expand...

Stigg said:

Please read the pinned comment and reply from Sordum.

What can you do to repair windows defender

Click to expand...

cheaterslick said:

And so do you have some kind of a tutorial about this?

Click to expand...

DJNelson said:

I do not, but I would be willing to share what changes I have made, provided I'm not breaking some rule somewhere.

Click to expand...

raptorex said:

Anybody knows how to get rid of smartscreen.exe ? I feel like I've disabled all smartscreen defender components but smartscreen.exe still running somehow.

Click to expand...

mxlexmark2 said:

Try this steps:

Disabling SmartScreen step by step

Click to expand...

raptorex said:

Yeah already disabled everything in the registry but this exe still running

Click to expand...

$remove_appx = @("SecHealthUI"); $provisioned = get-appxprovisionedpackage -online; $appxpackage = get-appxpackage -allusers; $eol = @()
$store = 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore'
$users = @('S-1-5-18'); if (test-path $store) {$users += $((dir $store -ea 0 |where {$_ -like '*S-1-5-21*'}).PSChildName)}
foreach ($choice in $remove_appx) { if ('' -eq $choice.Trim()) {continue}
  foreach ($appx in $($provisioned |where {$_.PackageName -like "*$choice*"})) {
    $next = !1; foreach ($no in $skip) {if ($appx.PackageName -like "*$no*") {$next = !0}} ; if ($next) {continue}
    $PackageName = $appx.PackageName; $PackageFamilyName = ($appxpackage |where {$_.Name -eq $appx.DisplayName}).PackageFamilyName
    ni "$store\Deprovisioned\$PackageFamilyName" -force >''; $PackageFamilyName 
    foreach ($sid in $users) {ni "$store\EndOfLife\$sid\$PackageName" -force >''} ; $eol += $PackageName
    dism /online /set-nonremovableapppolicy /packagefamily:$PackageFamilyName /nonremovable:0 >''
    remove-appxprovisionedpackage -packagename $PackageName -online -allusers >''
  }
  foreach ($appx in $($appxpackage |where {$_.PackageFullName -like "*$choice*"})) {
    $next = !1; foreach ($no in $skip) {if ($appx.PackageFullName -like "*$no*") {$next = !0}} ; if ($next) {continue}
    $PackageFullName = $appx.PackageFullName;
    ni "$store\Deprovisioned\$appx.PackageFamilyName" -force >''; $PackageFullName
    foreach ($sid in $users) {ni "$store\EndOfLife\$sid\$PackageFullName" -force >''} ; $eol += $PackageFullName
    dism /online /set-nonremovableapppolicy /packagefamily:$PackageFamilyName /nonremovable:0 >''
    remove-appxpackage -package $PackageFullName -allusers >''
  }
}

DJNelson said:

I shut off WaasMedicSvc

Click to expand...

The Windows Update Medic Service is a new Windows Service introduced in Windows 10. This Service has been introduced to repair Windows Update components from damage so that the computer can continue to receive updates.

Windows Update Medic Service (WaaSMedicSVC) enables remediation and protection of Windows Update components. This means that even if you disable Windows Update related Services, this service will at some point in time re-enable them.

Click to expand...

KevTech said:

WaaSMedicSVC is for repairing Windows Update.

Click to expand...

mxlexmark2 said:

In my system is not running any smartsreen.exe after using this script:

1 - backup your current system

2 - if Windows Defender is installed/running to go into the Windows Defender Security Settings and Disable everything including Tamper Protection.

3 - run Defender Remover as Administrator

4 - restart PC

5 - run Powershell as Admin and remove SecHealth:

Powershell:

$remove_appx = @("SecHealthUI"); $provisioned = get-appxprovisionedpackage -online; $appxpackage = get-appxpackage -allusers; $eol = @()
$store = 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore'
$users = @('S-1-5-18'); if (test-path $store) {$users += $((dir $store -ea 0 |where {$_ -like '*S-1-5-21*'}).PSChildName)}
foreach ($choice in $remove_appx) { if ('' -eq $choice.Trim()) {continue}
  foreach ($appx in $($provisioned |where {$_.PackageName -like "*$choice*"})) {
    $next = !1; foreach ($no in $skip) {if ($appx.PackageName -like "*$no*") {$next = !0}} ; if ($next) {continue}
    $PackageName = $appx.PackageName; $PackageFamilyName = ($appxpackage |where {$_.Name -eq $appx.DisplayName}).PackageFamilyName
    ni "$store\Deprovisioned\$PackageFamilyName" -force >''; $PackageFamilyName
    foreach ($sid in $users) {ni "$store\EndOfLife\$sid\$PackageName" -force >''} ; $eol += $PackageName
    dism /online /set-nonremovableapppolicy /packagefamily:$PackageFamilyName /nonremovable:0 >''
    remove-appxprovisionedpackage -packagename $PackageName -online -allusers >''
  }
  foreach ($appx in $($appxpackage |where {$_.PackageFullName -like "*$choice*"})) {
    $next = !1; foreach ($no in $skip) {if ($appx.PackageFullName -like "*$no*") {$next = !0}} ; if ($next) {continue}
    $PackageFullName = $appx.PackageFullName;
    ni "$store\Deprovisioned\$appx.PackageFamilyName" -force >''; $PackageFullName
    foreach ($sid in $users) {ni "$store\EndOfLife\$sid\$PackageFullName" -force >''} ; $eol += $PackageFullName
    dism /online /set-nonremovableapppolicy /packagefamily:$PackageFamilyName /nonremovable:0 >''
    remove-appxpackage -package $PackageFullName -allusers >''
  }
}

6 - restart PC

7 - install your AIO security or AV software or other way install Windows X-Lite 24H2 Pro v4.6, which have no Defender and other MS crap :

Click to expand...

raptorex said:

Does that win x-lite receice regular win update?

Click to expand...

DJNelson said:

You can turn on windows updates in x-lite, if you choose, but that will probably result in a stock version of windows, with all the bloat that comes with it.. Looks like they're uploading updated versions every few months or so, for those who have decided not to trust updates.

Click to expand...

mxlexmark2 said:

Windows X-Lite creating own Updates, which have no MS bloatware etc. . See here: Update packs

Click to expand...

https://catalog.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/481e196a-f580-4b50-afda-44ff25dcee2e/public/windows11.0-kb5064489-x64_6640d1a7a2a393bd2db6f97b7eb4fe3907806902.msu
https://catalog.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/2cf31dbf-ac4d-435b-8bc7-5a474dfad46e/public/windows11.0-kb5062553-x64_6fe34113fd31b773e8ecb31682dd95b1934be4c1.msu
https://catalog.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/107101f6-ddf6-4944-823d-53ce500f64a3/public/windows11.0-kb5060829-x64_144ba5be85931cb016a450a8ac17526146cdbdb1.msu
https://catalog.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/c64e871c-d486-4b61-9389-acb17989ced2/public/windows11.0-kb5063060-x64_96be31e3e3e1cbc216229abb83e5be9da4e08496.msu
https://catalog.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/d8b7f92b-bd35-4b4c-96e5-46ce984b31e0/public/windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu