How Can I Completely Remove Or Disable In Windows Defender In Win10 Rs5?

[dhjohns]

Just delete them yourself then.  Thanks for the list though.  I will copy them into a text file, and see if their deletion affects anything. 

[dhjohns]

New Remove Defender Tool v3.1

 

Site: https://mega.nz
Sharecode: /#!BBYCgSja!cliNrrtDeSHDyPzwblI5CT82pBPZ89K-9dsfKrRLwX8

 

SIZE: 94.8 KB (97,155 bytes)

SHA1: 97832C5AB9A753E09C8AD5AAACB533D6D7F4D109
MD5: F7E445286BBF4C66CF03FB0580843081
CRC32: 33335BA4

 

CHANGE LOG

 

Version 3.1 features updated Nsudo.exe, and added files, folders, and registry entries for removal as provided by RYU at NSaneForums.  Also some minor coding changes.

 

[RYU]

22 hours ago, dhjohns said:

Just delete them yourself then.  Thanks for the list though.  I will copy them into a text file, and see if their deletion affects anything. 

thanks bro for adding my name

[dhjohns]

1 minute ago, RYU said:

thanks bro for adding my name

You contributed.  How could I not? 

[wisebiscuit]

On 12/2/2018 at 12:44 AM, dhjohns said:

New Remove Defender Tool v3.1

 

Site: https://mega.nz
Sharecode: /#!BBYCgSja!cliNrrtDeSHDyPzwblI5CT82pBPZ89K-9dsfKrRLwX8



SIZE: 94.8 KB (97,155 bytes)

SHA1: 97832C5AB9A753E09C8AD5AAACB533D6D7F4D109
MD5: F7E445286BBF4C66CF03FB0580843081
CRC32: 33335BA4

 

 

@dhjohns can you please reupload your version 3.1! Thanks in advance!

[psudo]

@wisebiscuit if you are interested in completely uninstalling windows defender, you can use install_wim_tweak. You need to download it (hunt), then run the command:

 

install_wim_tweak /o /c Windows-Defender /r

 

Mind you, this is not for the faint hearted. This will remove all Defender packages. Then you can remove the tray icon too with a reg tweak. The only thing I still don't know how to do is to get rid of the start Menu icon.

 

I have not invented this method so full credit wherever it lies. But I have personally tested this and removed Defender from the PC I am typing on.

 

But yeah, its sort of mad. One can get by by just disabling the thing.

 

Also, I too am interested in dhjohn's tool, hopefully he'll re-up.

[wisebiscuit]

@psudo

Thanks for the reply but I am looking for complete eradication of Windows Defender. I am already a fan and user of @dhjohns first script - version 3.0.

After every time I use the script, OS works flawlessly on my side without any issue and on different builds or version! Even after Windows updates, everything works like a charm.
And I always get additional 700-800MB of RAM at disposal! 🤘 Great job is done here by @dhjohns

[psudo]

@wisebiscuitinstall_wim_tweak also eradicates defender completely and my os works fine and updates fine too. I wouldn't be surprised if dhjohn's tool also uses iwt. But I would be delighted to lay my hands on a new tool to get rid of defender.

Btw, if it isn't a bother and I'm not breaking any forum rules, can you possibly share dhjohns' version 3? Or link it if available?

[wisebiscuit]

@psudo Heres the code, No need to install anything.

 

Spoiler

takeown /f "%PROGRAMFILES%\Windows Defender" >nul 2>&1
icacls "%PROGRAMFILES%\Windows Defender" /grant "Everyone":F >nul 2>&1
rd /q /s "%PROGRAMFILES%\Windows Defender" >nul 2>&1

takeown /f "%PROGRAMFILES%\Windows Defender Advanced Threat Protection" >nul 2>&1
icacls "%PROGRAMFILES%\Windows Defender Advanced Threat Protection" /grant "Everyone":F >nul 2>&1
rd /q /s "%PROGRAMFILES%\Windows Defender Advanced Threat Protection" >nul 2>&1

takeown /f "%ProgramFiles(x86)%\Windows Defender" >nul 2>&1
icacls "%ProgramFiles(x86)%\Windows Defender" /grant "Everyone":F >nul 2>&1
rd /q /s "%ProgramFiles(x86)%\Windows Defender" >nul 2>&1

takeown /f "%PROGRAMDATA%\Microsoft\Windows Defender Advanced Threat Protection" >nul 2>&1
icacls "%PROGRAMDATA%\Microsoft\Windows Defender Advanced Threat Protection" /grant "Everyone":F >nul 2>&1
rd /q /s "%PROGRAMDATA%\Microsoft\Windows Defender Advanced Threat Protection" >nul 2>&1

takeown /f "%PROGRAMDATA%\Microsoft\Windows Security Health" >nul 2>&1
icacls "%PROGRAMDATA%\Microsoft\Windows Security Health" /grant "Everyone":F >nul 2>&1
rd /q /s "%PROGRAMDATA%\Microsoft\Windows Security Health" >nul 2>&1

takeown /f "%PROGRAMDATA%\Microsoft\Windows Defender" >nul 2>&1
icacls "%PROGRAMDATA%\Microsoft\Windows Defender" /grant "Everyone":F >nul 2>&1
rd /q /s "%PROGRAMDATA%\Microsoft\Windows Defender" >nul 2>&1

SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{6D40A6F9-3D32-4FCB-8A86-BE992E03DC76}" -ot reg -actn setowner -ownr "n:Administrators" >nul 2>&1
SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{6D40A6F9-3D32-4FCB-8A86-BE992E03DC76}" -ot reg -actn ace -ace "n:Administrators;p:full" >nul 2>&1
Reg.exe delete "HKEY_CLASSES_ROOT\CLSID\{6D40A6F9-3D32-4FCB-8A86-BE992E03DC76}" /f >nul 2>&1

SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{6CED0DAA-4CDE-49C9-BA3A-AE163DC3D7AF}" -ot reg -actn setowner -ownr "n:Administrators" >nul 2>&1
SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{6CED0DAA-4CDE-49C9-BA3A-AE163DC3D7AF}" -ot reg -actn ace -ace "n:Administrators;p:full" >nul 2>&1
Reg.exe delete "HKEY_CLASSES_ROOT\CLSID\{6CED0DAA-4CDE-49C9-BA3A-AE163DC3D7AF}" /f >nul 2>&1

SetACL.exe -on "HKEY_CLASSES_ROOT\AppUserModelId\Microsoft.Windows.Defender" -ot reg -actn setowner -ownr "n:Administrators" >nul 2>&1
SetACL.exe -on "HKEY_CLASSES_ROOT\AppUserModelId\Microsoft.Windows.Defender" -ot reg -actn ace -ace "n:Administrators;p:full" >nul 2>&1
Reg.exe delete "HKEY_CLASSES_ROOT\AppUserModelId\Microsoft.Windows.Defender" /f >nul 2>&1

SetACL.exe -on "HKEY_CLASSES_ROOT\AppUserModelId\Windows.SystemToast.SecurityCenter" -ot reg -actn setowner -ownr "n:Administrators" >nul 2>&1
SetACL.exe -on "HKEY_CLASSES_ROOT\AppUserModelId\Windows.SystemToast.SecurityCenter" -ot reg -actn ace -ace "n:Administrators;p:full" >nul 2>&1
Reg.exe delete "HKEY_CLASSES_ROOT\AppUserModelId\Windows.SystemToast.SecurityCenter" /f >nul 2>&1

SetACL.exe -on "HKEY_CLASSES_ROOT\AppUserModelId\Windows.Defender" -ot reg -actn setowner -ownr "n:Administrators" >nul 2>&1
SetACL.exe -on "HKEY_CLASSES_ROOT\AppUserModelId\Windows.Defender" -ot reg -actn ace -ace "n:Administrators;p:full" >nul 2>&1
Reg.exe delete "HKEY_CLASSES_ROOT\AppUserModelId\Windows.Defender" /f >nul 2>&1

SetACL.exe -on "HKEY_CLASSES_ROOT\AppUserModelId\Windows.Defender.SecurityCenter" -ot reg -actn setowner -ownr "n:Administrators" >nul 2>&1
SetACL.exe -on "HKEY_CLASSES_ROOT\AppUserModelId\Windows.Defender.SecurityCenter" -ot reg -actn ace -ace "n:Administrators;p:full" >nul 2>&1
Reg.exe delete "HKEY_CLASSES_ROOT\AppUserModelId\Windows.Defender.SecurityCenter" /f >nul 2>&1

SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{F2102C37-90C3-450C-B3F6-92BE1693BDF2}" -ot reg -actn setowner -ownr "n:Administrators" >nul 2>&1
SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{F2102C37-90C3-450C-B3F6-92BE1693BDF2}" -ot reg -actn ace -ace "n:Administrators;p:full" >nul 2>&1
Reg.exe delete "HKEY_CLASSES_ROOT\CLSID\{F2102C37-90C3-450C-B3F6-92BE1693BDF2}" /f >nul 2>&1

SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}" -ot reg -actn setowner -ownr "n:Administrators" >nul 2>&1
SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}" -ot reg -actn ace -ace "n:Administrators;p:full" >nul 2>&1
Reg.exe delete "HKEY_CLASSES_ROOT\CLSID\{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}" /f >nul 2>&1

SetACL.exe -on "HKEY_CLASSES_ROOT\AppID\{2EB6D15C-5239-41CF-82FB-353D20B816CF}" -ot reg -actn setowner -ownr "n:Administrators" >nul 2>&1
SetACL.exe -on "HKEY_CLASSES_ROOT\AppID\{2EB6D15C-5239-41CF-82FB-353D20B816CF}" -ot reg -actn ace -ace "n:Administrators;p:full" >nul 2>&1
Reg.exe delete "HKEY_CLASSES_ROOT\AppID\{2EB6D15C-5239-41CF-82FB-353D20B816CF}" /f >nul 2>&1
Reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "SettingsPageVisibility" /t REG_SZ /d "hide:windowsdefender" /f >nul 2>&1
CLS

 

 

 

[psudo]

@wisebiscuit I had a look at dhjohn's script. What it is doing is elevating user privileges to delete various Defender related folders and registry entries. IWT is far more comprehensive because it actually removes various OS packages related to defender. But mind you, with this tool, theres no way to reinstall defender on a live windows so if one regrets the decision, windows will need to be reinstalled.

[wisebiscuit]

@psudo This script is exactly for people who do not like him or to be more precise, for people who hate him. No regrets for removing Defender on my side! I do not like him at all! I am doing a clean installation on regular basis, so no problem for me!

Maybe I am wrong but when you remove something from Windows 10 you cannot receive updates about related with it. Here no error will occur during regular updates, in comparison to some customized OS's.

 

But I will definitely take a look at your suggestion in further. 

[psudo]

@wisebiscuiti completely agree with you that dhjohns' script is safe and sufficient. After many years of destruction, I have also reached the conclusion that some things can just let be or at most made a little less annoying. There's no need to go around breaking the OS.

[MrZeb]

On 12/1/2018 at 11:44 PM, dhjohns said:

New Remove Defender Tool v3.1

 

Site: https://mega.nz
Sharecode: /#!BBYCgSja!cliNrrtDeSHDyPzwblI5CT82pBPZ89K-9dsfKrRLwX8

 

SIZE: 94.8 KB (97,155 bytes)

SHA1: 97832C5AB9A753E09C8AD5AAACB533D6D7F4D109
MD5: F7E445286BBF4C66CF03FB0580843081
CRC32: 33335BA4

 

CHANGE LOG

  Reveal hidden contents

Version 3.1 features updated Nsudo.exe, and added files, folders, and registry entries for removal as provided by RYU at NSaneForums.  Also some minor coding changes.

 

 

Hi @dhjohns do you have a new link to download  v3.1?

 

Thanks.

[dhjohns]

Site: https://mega.nz
Sharecode: /#!YEogQA6a!Vz7Dn7iTIjgOKRTCdcaZcbHqSL5oE_x_hYKaZsT4teA

[psudo]

On 1/30/2019 at 10:45 PM, dhjohns said:

Site: https://mega.nz
Sharecode: /#!YEogQA6a!Vz7Dn7iTIjgOKRTCdcaZcbHqSL5oE_x_hYKaZsT4teA

Hello dhjohns. I ran version 3.2 of your app (you linked) and noticed it uses powershell to remove defender packages and then tweak registry keys. I have used install_wim_tweak in the past to achieve the same resullts. Can you please tell me how removing packages via powershell compares with removing via install_wim_tweak? 

 

Edit: Ha, I see you use wim tweak too!

[psudo]

Really nice package, dhjohns! Gets rid of windows packages with IWT and then completes the process by removing/ tweaking defender related folders and registry keys. I like Nsudo and am glad you've used it here. Keeping this!

[ace_N_kelly]

On 1/30/2019 at 12:15 PM, dhjohns said:

Site: https://mega.nz
Sharecode: /#!YEogQA6a!Vz7Dn7iTIjgOKRTCdcaZcbHqSL5oE_x_hYKaZsT4teA

I have your "RemoveDefender_v4.0" but the topic has been remove from Nsane ...and the mega link to your 3.1 is dead !!

Is the 3.1 better then 4.0 ??

Can I have a link to the v3.1 if it's better ?