The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Windows defender automatically turns it's self on

    Discussion in 'Windows OS and Software' started by N2ishun, Dec 1, 2021.

  1. N2ishun

    N2ishun Notebook Evangelist

    Reputations:
    116
    Messages:
    305
    Likes Received:
    210
    Trophy Points:
    56
    I know there is a tool out there that forever kills windows defender....can anyone hook a brutha up please ?

    Somehow during the night last night defender not only turned it's self back on (after killing it in regedit) but it deleted some files I had specifically set it to not delete (settings are still set as such) on a drive I had told it not to scan (setting is still set as such).

    Piss, me, off.

    These are small macro files that I use to automate tasks I sometimes do.

    The laptop was not powered on last night, somehow once I powered up this morning it just decided it needed to screw me.
    No surprise being this is microshaft we are talking about.
    BTW, Win10 LTSC x64 (2019).
     
    Spartan@HIDevolution and Papusan like this.
  2. Spartan@HIDevolution

    Spartan@HIDevolution Company Representative

    Reputations:
    39,567
    Messages:
    23,559
    Likes Received:
    36,826
    Trophy Points:
    931
    It will keep turning itself on because to the new feature called Tamper Protection UNLESS you have a 3rd party AV installed. Get rid of that sucker for good!

    Uninstall Windows Defender Permanently
     
    Papusan and N2ishun like this.
  3. N2ishun

    N2ishun Notebook Evangelist

    Reputations:
    116
    Messages:
    305
    Likes Received:
    210
    Trophy Points:
    56
    I had it killed in registry (or so I thought).
    Thanks bud :)
     
    Spartan@HIDevolution likes this.
  4. StormJumper

    StormJumper Notebook Virtuoso

    Reputations:
    579
    Messages:
    3,537
    Likes Received:
    488
    Trophy Points:
    151
    So what are you trying to do that negates Defender in the first place? Unless your creating virus and malware Defender isn't going to do much of anything by itself. You have to have a 3rd party A/V or Defender running in your system. And Windows update will update Defender as well. We on here aren't in the business of helping people removing a legal A/V for specific reasons as I just outlined and asking so might get MODs involved. If you are so inclined to do this - this is your own DIY at your own risk.
     
  5. Tech Junky

    Tech Junky Notebook Deity

    Reputations:
    341
    Messages:
    1,472
    Likes Received:
    596
    Trophy Points:
    131
    Kill it under services.msc to prevent it from running.
     
  6. Spartan@HIDevolution

    Spartan@HIDevolution Company Representative

    Reputations:
    39,567
    Messages:
    23,559
    Likes Received:
    36,826
    Trophy Points:
    931
    The services are protected/greyed out. You have to use the full uninstaller or permanently disable and run the reg file to set the status of the services from Automatic to disabled. If WD wasn't fully disabled along with its tamper protection, even importing the registry file will fail. It's not as simple as you make it sound.
     
    Papusan likes this.
  7. N2ishun

    N2ishun Notebook Evangelist

    Reputations:
    116
    Messages:
    305
    Likes Received:
    210
    Trophy Points:
    56
    We do have the choice if we don't desire or require something on our system.
    Legal AV ?
    When MS force feeds it to you and you can't uninstall it normally is it really legal ?
     
  8. Tinderbox (UK)

    Tinderbox (UK) BAKED BEAN KING

    Reputations:
    4,740
    Messages:
    8,513
    Likes Received:
    3,823
    Trophy Points:
    431
    There is an free app called "Optimizer" it`s at version 10.7 at the moment.

    You can disable Windows Defender and much much more, I have been using this for months without any ill effects.

    https://github.com/hellzerg/optimizer

    EDIT: does not disable WD on Windows 10 1903 and higher :(, But it`s still a handy app.
     
  9. Spartan@HIDevolution

    Spartan@HIDevolution Company Representative

    Reputations:
    39,567
    Messages:
    23,559
    Likes Received:
    36,826
    Trophy Points:
    931
    Tamper protection will not allow you to disable it, it will re-enable itself upon startup unless you open regedit as a trusted installer and edit the values of the services to disabled or use the uninstaller mentioned above which is a single click that does all the magic
     
    Papusan likes this.
  10. Tech Junky

    Tech Junky Notebook Deity

    Reputations:
    341
    Messages:
    1,472
    Likes Received:
    596
    Trophy Points:
    131
    upload_2021-12-3_11-55-38.png

    I suppose the nuclear option would be delete the directory while in safe mode and forget about it.
     
  11. N2ishun

    N2ishun Notebook Evangelist

    Reputations:
    116
    Messages:
    305
    Likes Received:
    210
    Trophy Points:
    56
    Won't work.
    She'll come right back and haunt you.
    You can disable it, you can delete it....like the cockroach it is, it will return.
     
    Spartan@HIDevolution likes this.
  12. Papusan

    Papusan Jokebook's Sucks! Dont waste your $$$ on Filthy

    Reputations:
    42,691
    Messages:
    29,835
    Likes Received:
    59,599
    Trophy Points:
    931
    From what I can read from your post, then should the mods remove all posted custom ISO's, posts about tweaked security settings that put you at risk vs. better performance (see etc Win 11 new HW recuirements), all custom tweaks to disable etc Windows update in all the different forum threads.
     
    Spartan@HIDevolution likes this.
  13. Spartan@HIDevolution

    Spartan@HIDevolution Company Representative

    Reputations:
    39,567
    Messages:
    23,559
    Likes Received:
    36,826
    Trophy Points:
    931
    I hope you don't take anything that guy says seriously! [​IMG]
     
  14. Papusan

    Papusan Jokebook's Sucks! Dont waste your $$$ on Filthy

    Reputations:
    42,691
    Messages:
    29,835
    Likes Received:
    59,599
    Trophy Points:
    931
    Spartan@HIDevolution likes this.
  15. StormJumper

    StormJumper Notebook Virtuoso

    Reputations:
    579
    Messages:
    3,537
    Likes Received:
    488
    Trophy Points:
    151
    Like I said removing a A/V is asking for Problems and what ISO people use that is your choice if your not using Windows OEM ISO that is your choice to live with custom ISO that you aren't able to verify how it was built and whom it was built for. If you want to be a tester then buy all means go for it but if you plan to use that for your daily everyday routine then that is asking for problems to crop up sooner or later since it's missing crucial components. And as I said the last part DIY at your own risk.
     
  16. hertzian56

    hertzian56 Notebook Deity

    Reputations:
    426
    Messages:
    1,002
    Likes Received:
    760
    Trophy Points:
    131
    I used the sordum app and it has never turned itself back on but of course I've had updates turned off too. Turn off updates. I also think using a third party firewall with manual control would help to stop anything going online you don't approve. Don't bother with the virus' they call and sell as security progs imo, just be smart/cautious.
     
  17. epguy3

    epguy3 Notebook Evangelist

    Reputations:
    339
    Messages:
    483
    Likes Received:
    383
    Trophy Points:
    76
    same here, I use sordum defender control to permanently disable windows defender and it has never re-enabled itself on all my win8.x & win10 systems. version 2.0 of defender control also supports win11 and works there too in permanently shutting off defender. been using sordum ever since it first came out

    the OP should have thought of using the defender control app in the 1st place, hah!
     
    Last edited: Dec 15, 2021
    hertzian56 likes this.
  18. hertzian56

    hertzian56 Notebook Deity

    Reputations:
    426
    Messages:
    1,002
    Likes Received:
    760
    Trophy Points:
    131

    yeah never had a major problem but use common sense for the internet and what I download. When I get some weird thing asking for internet access I block it w my firewall, grab the free virus progs on bleepingcomputer and good to go. For those concerned with keylogging I've used kldetector, ghostpress etc to monitor it from time to time. Winaerotweaker has a defender turnoff for double confirmation among lots of other win control stuff.