Hi all,
So I downloaded Kontakt 7 but in order to make it work, you have to run a patch, but defender think it's a virus and deletes it immediately after I unzip it.

The thing is, since I did a complete reset on my PC, my Microsoft Defender app is broken and I cannot turn it off. I have tried everything and contacted Microsoft who confirmed it is a known issue and the only thing to do is wait for a fix to be released. However, its now been over a month and I gave up on fixing this, but I am wondering if any workaround exists.

Is there a way to make the file not detected as a threat? I have a laptop with no issues, could I remotely patch the file with Google drive or something? Could I manually do what the patch is supposed to and of so, how?

Any help is greatly appreciated. Thanks!

 

First, make sure this patch is from a reputable source. If you're not sure where it came from, don't trust it. Then, if all is well, you probably need to set the patch as an exclusion in your Defender settings:

In Windows 10 -> Windows Security --> Virus & Threat Protection --> Under Virus & threat protection settings, click on Manage Settings --> Scroll down near the bottom and look for Exclusions --> click Add or remove exclusions

 

#1. there should be no internet connections to a production machine running scene releases.
#2. win update and A/V, MS Store, Firewall etc... should ALL be disabled as in not able to function.

I use this method when the GUI controls either don't do what I want them to, or they are malfunctioning....
to remove defender and its firewall from the equation try the following;
- install the "take ownership" context menu item this will tell you how

- then take ownership of the following system protected files
Defender Advanced Threat Protection Service - %ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe
Defender Firewall Service - %SystemRoot%\system32\mpssvc.dll
Defender Firewall Authorization Driver - %SystemRoot%\System32\drivers\mpsdrv.sys
Defender Network Stream Filter Driver Service - %SystemRoot%\system32\drivers\wdnsfltr.sys

** rename each of the above files to their original names .BAK
EX. "MsSense.exe.BAK" - do this for all 4 files above. reboot.
defender and the firewall will be rendered inert. you can re-establish them by simply reversing everything back.

 

Last edited: Feb 21, 2024

Unfortunately the "Virus and threat protection" tab does not even appear on my defender and if I try to search it an error message pop up... its really broken I really tried everything

 

Ok i'll try that! Won't tamper protection block that though? Because I cannot turn that off either.
Also I'm not quite sure what you mean by production machine? You mean I should turn off wifi while I run the scene release?

 

you can disable tamper protection via the registry this way
production machine = a machine you're using scene releases on to produce audio/video/photo etc...
and yes, running warez on a machine connected to the internet is just asking for stuff to break...

 

Good i'll try that! Thanks for the advice

 

Your method seems to be the most sensible. I located the other three files but I don't see this one.
I do see a wdfilter.sys, but I'm definitely not going to say "close enough" even though a google search does say that this file is related to windows defender network security.
If anyone can advise I would appreciate it.

 

You probably need to set your view to allow for system files to be displayed.