Man, everytime i boot up my pc, windows defender keeps flagging cracked exes,dlls from r2r e.t.c Its annoying. What can I do?

 

That's strange, except keygens, never had problem with dlls. assuming you have them from sister site and they are indeed clean, try the following:

Add scan folder exception Virus & Threat Protection -> Virus & Threat Protection settings -> scroll all the way down > Add or remove exclusions -> add your VST folder.

There are ways to disable defender for good but i wont suggest this. However here how is done:

1. Open the Group Policy Editor:
   
   • Press Windows + R, type gpedit.msc, and press Enter.
     
2. Navigate to Windows Defender Settings:
   
   • Go to Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus.
     
3. Disable Microsoft Defender Antivirus:
   
   • Double-click on Turn off Microsoft Defender Antivirus.
     
     
   • Select Enabled and click Apply, then OK.
     
4. Restart Your Computer:
   
   
   • Restart your computer to apply the changes. Windows Defender should now be permanently disabled.

You can always install TEAM R2R Root Certificate-R2R. I have to warn you though that a root certificate is no joke, it gives permissions on the highest level to the witches. It's up to you how you trust them.

 

You should pack your plugins with WinRar in particular. All plugins are better stored on a different partition or externally.

 

I always do that with keygens/patches. I backup them to a rar file with password, to make sure can't be scanned by an antivirus.
I maintain the original keygen in case the AV deletes/quarantines it.
But of course that doesn't work if the AV is always active, it deletes it before you can do anything.

 

The previously mentioned steps to squash defender are only stop gap. Defender will reenable itself and any other measures taken to defeat it will be undone if the updater is allowed to run or the machine is left online. You really only have a few options available to keep things intact...

1. Make EXCEPTIONS to leave the folders for all installed warez ALONE. This might work ok if you dont have that many folders to exclude but will get tedious if you have a lot of stuff spread over many folders. Plus you will have to remember to create exclude rules after every new install.

2. Remove defender - you can use this tool. Recommend this one only so long as the internet connection is permanently removed from the machine. If you want to surf use a machine specially set up to surf.

Do not use your production box for internet. Also if you remove the net connection you can also remove win update, Edge, wallet, firewall, and all the rest of the telemetry garbage that gets installed by default because it's not needed for production. At that point it's all just services, processes and cron jobs that are using resources that should be used for production purposes.

This is called "optimization". There are triggered "tasks" that will fire off whenever certain conditions are met - those need to be silenced as well. Securing and optimizing a OEM win11 build (or even win10 22h2+) is a circus of snakes and you will revisit things as they crop up.

Finally, score yourself a good disc backup imaging app like acronis, norton ghost, easyus, etc. Use it liberally and often for imaging the entire system to LOCAL offline storage (not "cloud").

 

Last edited: Nov 11, 2024 at 10:39 PM

Personally, defender has been the bane of AV's since invention, so I have always removed it entirely. For everything we gain we lose something.
My Win 11 can never reinstall it even though it can still do updates, but that option is only for people who know they will never change their mind.

 

I always turn off Windows Defender when extracting files, especially when dealing with releases from Team R2R. I keep the folder named "R2R" where the Keygen is usually stored in a RAR file. This helps avoid any unnecessary interruptions from the antivirus software.

 

Turn Defender off forever ...

https://www.sordum.org/9480/defender-control-v2-1/
(freeware)

 

Do not remove, disable or do anything to stop defender if you are connected to the internet... This is terrible advice. Instead, change it to a warez friendly AV such as Kaspersky free or Bitdefender.

 

I use safe mode to disable Defender in the registry, other methods tend to get reset.

https://woshub.com/disable-windows-defender-antivirus/

 

add exceptions to the folders containing ur vst installs if u got it from clean sources

 

google revios. it strips all the unnecessary services, stops defender etc.

 

are you sure that your PC has not been infected? Some viruses propagates like wild fire. With R2R, Defender shouldn't report anything except their keygens. If it is triggered by .exe and .dll, there is most likely a real problem.

If you have your R2R archives stored on an external HDD, start by checking these are not infected as well, and then also redownload the one you have a problem with to make sure they are clean before trying again.

You can try a manual scanner by Emsisoft (Emergency Kit), its free and labels threats pretty accurately

 

You have a choice to make.

You can either trust R2R, and add all their files to windows defender 'safe' list, OR you can refuse to trust R2R, and then either remove their plug-ins or keep seeing those messages.

Even R2R themselves wouldn't tell you to how to use your computer, but that laid bear is the choice you have to make.

I will just say one thing though. I trust R2R far more than I do Microsoft, and that's why I have no doubts about adding their files to MY 'safe' list

 

If you are 'Power user' like many of us are here, and want to be the Lord of your machine (instead of Microsoft) then disable defender and be done with it, I disable defender on all of my computers and computers I build for power-user clients. There are far less intrusive antiviruses if you feel the need to have one running at all times, a good one is Malware bytes.

As already linked above Sordum's "defender control" is great simple option, or you can use other apps like WinAreo Tweaker which has a ton of other power-user options for windows as well.

 

r2r kontakt manger and r2r studio one 7, theres this dll file that gets flagged

 

i'm referring to installed plugins here, i have the setups on an external and i turn off windows defender before i mount that drive

 

Windows Defender is pure crap. It flags almost everything thats not signed as virus.
So if you create your own custom installer, it's a not signed executable and Defender cries around.
That's why I deleted defender from my windows imageto use another Antivirus that does the job better.

 

Can't you just install a third party AV with an easily accessible on/off toggle and popups-on-detection that offer you to add an exception right there?

 

I also have my installed plugins on the C:/ hard drive, the "Defender" used to scan it too, I no longer have Defender but it never found anything, my faithful companion the "ADWcleaner" always runs on the C:/ hard drive but it never triggers.

What does that mean? R2R installed plugins do not have virus software!

But after you have installed something you should pack the keygens separately with WinRar, because if you want to reinstall it later the Defender will eat the keygen and it will be in Nirvana and you will have to find where you can get the software again.