I'm trying to stop Windows Defender and other anti-virus programs from deleting my patches and cracks. I've tried to uninstall and disable Window Defender but all attempts have failed. I've installed other anti-virus programs and tried disabling them to no avail. As recommended in a post that I read here, I tried making exceptions to not scan specific folders. Nothing has worked. The software has a mind of its own and continues to scan files I've specifically forbidden. I'm not sure what to do next. I was wondering if anyone knows how to permanently disable Windows Defender or disable anti-virus programs permanently or at least make scanning exceptions that are not overridden by the software. Thanks in advance.

 

Defender does NOT "have a mind of its own" and will NOT scan files in folders for which exceptions have been created.
SOME keygens will run their processes in temporary locations and Defender will 'catch' files that way, but the original keygens are not deleted and remain running.
In those cases one may manually turn off "active protection" while running the keygens / patchers.
Remember to create an exclusion if you are going to leave a crack in a newly created program folder.

You should NOT download cracks to your normal User\Downloads folder.
You should create folders that you use only to download and store software and cracks like this.
That way you can let Defender keep scanning your normal Downloads folder.


So, the big question here is:
Where are you keeping these files that Defender has access to them?
I mean, type out here the full path, including drive letter.

 

Just make an exception folder and put that stuff there.

 

Here is a simple On/Off switch for your Defender without having to hassle with GPO:

https://www.sordum.org/9480/defender-control-v2-1/

 

i really dont know much so better not trust me without reading a lot of other opinions.

what helped here was disabling defender and guard (real time protection) with group policies:
from the command prompt type

net user administrator /active:yes

this enables the admin account. not sure if its necessary to log off and log in as admin, so i did.
now type gpedit.msc
to bring up the group policies editor. under security you can disable both. before that i chose to tell guard what to do if it finds something: "nothing". just in case it reenables itself accidentally, also there are 3rd party tools to make defender exceptions more easily.

 

First rule: if you download something turn off your defender beforehand.
Second rule: After you install, always pack your files with Winrar.
Windows scans your PC once a week, if you packed your data with the keygens, Windows Defender will not delete them.

Turn off Defender antivirus protection in Windows Security
https://support.microsoft.com/en-us...security-99e6004f-c54c-8509-773c-a4d776b77960

 

Last edited: Aug 1, 2022

turning it off in security is not pernanent. it doesnt stay put

 

However, sometimes it automatically reactivates itself (Windows 10).

 

A lot of interesting software to customize and manage Windows on this site

 

It should not if you block or manage Windows Update I think

 

Yes, that is also the purpose of Windows Defender that it protects you from dangers.
You really have to disable Windows every time you download or install something and then re-enable it after installation.

 

This cannot work. You cannnot use an " outside " app to kill Defender for real. It'll be back in a short time.
Only ( tricky ) reg hacks work.

Not enough. It must be totaly nuked.

The less Windows apps running / aboard, the better.
Nuke it, and replace by - for example : Avast and sweet TinyWall, so light, logical, and easy.

 

Last edited: Aug 1, 2022

Part of REALLY nuking most of boring Win services :

=> You'll need the small " Install_Wim_Tweak.exe ", to be copied to C:\Windows\System32 .

Start by creating an image of the OS, just in case of... With Macrium Reflect, for example ( free ).

So, here, W. Defender :

=> ( it would be preferable if hidden from public view but I can't find how on this present page )

Run the command prompt ( not the PowerShell ! ) as admin, and type or copy/paste this - in between the horizontal bars - :
__________________________________________________________________________________

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v SmartScreenEnabled /t REG_SZ /d "Off" /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t REG_DWORD /d "0" /f
reg add "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t REG_DWORD /d "0" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /v SpyNetReporting /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /v SubmitSamplesConsent /t REG_DWORD /d 2 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /v DontReportInfectionInformation /t REG_DWORD /d 1 /f
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\Sense" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\MRT" /v "DontReportInfectionInformation" /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\MRT" /v "DontOfferThroughWUAU" /t REG_DWORD /d 1 /f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SecurityHealth" /f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run" /v "SecurityHealth" /f
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SecHealthUI.exe" /v Debugger /t REG_SZ /d "%windir%\System32\taskkill.exe" /f
install_wim_tweak /o /c Windows-Defender /r
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance" /v "Enabled" /t REG_DWORD /d 0 /f
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\SecurityHealthService" /f
__________________________________________________________________________________

This will take 1-2 minutes.

The W. Security icon in the Start menu can no longer be removed without breaking the system. If Windows complains about the system being unprotected, right click the notification and hide it :

http://ibb.co/X79Vhv4

Hack certainly not by me but by an amazing expert. Applied in 2018, W. Security dead forever.

Other useless, boring Win services / fonctions can be killed in a semilar way.

 

Last edited: Aug 1, 2022

Thanks. I appreciate everyone who took the time to respond to my question.

 

I don't know what it's like with the retail version of Windows, but if you use Windows 10 LTSC then you can just turn off the "real-time protection" temporarily in order to extract/run the keygen, then turn it back on after you're done.

It also helps if you download all your cracks straight to an external hard drive. I never have issues. Actually, i never even have to turn off 'real-time protection'. Maybe 1 in every 20-30 downloads Windows Defender will quarantine a keygen i just extracted, and i just disable real-time protection and try again and it works every time

 

Where do you find this file? To apply the tweak

 

How does somebody give this comment a dislike? By accident, perhaps? Is Bill Gates a secret member of this site?

 

You can successfully disable defender permanently. It is however non-reversible.
It will look like this afterwards - your device is not vulnerable if you have another installed just that Windows knows you disabled its protection.



GOOGLE - Powershell - Defender complete deletion

You will know you have the right one because the opening part will look like this
(You have been warned - it's irreversible) - the address is also in the image below.

 

Google will show you a multitude of links for it. Good, not good .

So here is " mine ", from a secure place, in case of doubt, used and re-used, etc., :

a tiny 19 KB => http://peeplink.in/8ac9922ac6a0

Once all commands executed, we can remove it from C:\Windows\System32.

 

Last edited: Aug 9, 2022

Because it links to Defender Control and other " tools " perfectly useless here, sir. So MY dislike. Is it forbidden? And it's certainly not an " accident ".

Why, BTW, use such a falsely diplomatic convolution rather than referring to my pseudonym directly?

Bill gates... I'm fed up x 1000 with that ridiculous kindergarden yada yada, typical, so pathetic. The day you'll have his brain, we'll talk. Otherwise, why not just use a Mac - or Linux - and let the people happy with a PC do their job ?

 

Last edited: Aug 9, 2022