I disabled defender but it is still working ! How I can stop it ?


William654

Well-known member
Member
VIP
Local time
10:57 PM
Posts
624
OS
Windows 11
Hi

I have another anitvirus and I want to stop defender so I stopped all the services but I found it is still working and deleted one of my files !! How I permanently stop defender ?

Here are the options I used:

1735133178612.webp

1735133222519.webp

1735133255301.webp

What is dev drive !!??
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    5900x
    Motherboard
    MAG X570S TOMAHAWK MAX WIFI
    Memory
    32 GB G.Skill
    Graphics Card(s)
    RX 6800 XT
    Sound Card
    Creative Sound Blaster Z
    Monitor(s) Displays
    BENQ and AOC QHD 120Hz
    Screen Resolution
    QHD
    Hard Drives
    2TB Intel 660p and 2TB Sabrent Rokect 4 plus nvme, 4TB HDD HGST
    PSU
    Corsair RM750
    Case
    Bloody rage
    Cooling
    Water cooling gamdias 240
    Keyboard
    razer ornata
    Mouse
    razer da v2
    Browser
    FF and Chrome
    Antivirus
    Malwarebytes

My Computers

System One System Two

  • OS
    Windows 11 Pro 24H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Intel NUC12WSHi7
    CPU
    12th Gen Intel Core i7-1260P, 2100 MHz
    Motherboard
    NUC12WSBi7
    Memory
    64 GB
    Graphics Card(s)
    Intel Iris Xe
    Sound Card
    built-in Realtek HD audio
    Monitor(s) Displays
    Dell U3219Q
    Screen Resolution
    3840x2160 @ 60Hz
    Hard Drives
    Samsung SSD 990 PRO 1TB
    Keyboard
    CODE 104-Key Mechanical with Cherry MX Clears
    Antivirus
    Microsoft Defender
  • Operating System
    Linux Mint 21.2 (Cinnamon)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Intel NUC8i5BEH
    CPU
    Intel Core i5-8259U CPU @ 2.30GHz
    Memory
    32 GB
    Graphics card(s)
    Iris Plus 655
    Keyboard
    CODE 104-Key Mechanical with Cherry MX Clears

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    5900x
    Motherboard
    MAG X570S TOMAHAWK MAX WIFI
    Memory
    32 GB G.Skill
    Graphics Card(s)
    RX 6800 XT
    Sound Card
    Creative Sound Blaster Z
    Monitor(s) Displays
    BENQ and AOC QHD 120Hz
    Screen Resolution
    QHD
    Hard Drives
    2TB Intel 660p and 2TB Sabrent Rokect 4 plus nvme, 4TB HDD HGST
    PSU
    Corsair RM750
    Case
    Bloody rage
    Cooling
    Water cooling gamdias 240
    Keyboard
    razer ornata
    Mouse
    razer da v2
    Browser
    FF and Chrome
    Antivirus
    Malwarebytes
this maybe of no help at all.
i have another antivirus AVG but have windows defender running in the background all seems to be working well together.

but you can have a look here.

and here.

best of luck, Steve ..
 

My Computers

System One System Two

  • OS
    Win 11 Home 24H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP 24" AiO
    CPU
    Ryzen 7 5825u
    Motherboard
    HP
    Memory
    64GB DDR4 3200
    Graphics Card(s)
    Ryzen 7 5825u
    Sound Card
    RealTek
    Monitor(s) Displays
    24" HP
    Hard Drives
    1TB WD Blue SN580 M2 SSD Partitioned.
    250GB C:/Windows .. 750GB D:/Home.
    2x 1TB USB HDD External Backup/Storage.
    Internet Speed
    900MB full fibre
    Browser
    Vivaldi .. Browser, Calendar, eMail.
    Antivirus
    AVG Internet Security
    Other Info
    Mainly Open Source Software
  • Operating System
    Windows 11 Home 24H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP 24" AiO
    CPU
    Ryzen 5 5500u
    Motherboard
    HP
    Memory
    32GB DDR4 3200
    Graphics card(s)
    AMD Radeon GPU
    Sound Card
    RealTek
    Monitor(s) Displays
    HP
    Hard Drives
    1TB WD blue SN580 M2 SSD Partitioned.
    250GB C:/Windows .. 750GB D:/Home.
    2x 1TB HDD External Backup/Storage.
    Internet Speed
    900MB Full Fibre
    Browser
    Microsoft Edge
    Antivirus
    AVG Internet Security
    Other Info
    Mainly Windows Software
    'The Wife's Computer'
I disabled now defender using gpedit and restart my pc then I executed this:

Code:
PS C:\Users\user> Get-MpComputerStatus | select AMRunningMode

AMRunningMode
-------------
SxS Passive Mode

what passive mode mean ?
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    5900x
    Motherboard
    MAG X570S TOMAHAWK MAX WIFI
    Memory
    32 GB G.Skill
    Graphics Card(s)
    RX 6800 XT
    Sound Card
    Creative Sound Blaster Z
    Monitor(s) Displays
    BENQ and AOC QHD 120Hz
    Screen Resolution
    QHD
    Hard Drives
    2TB Intel 660p and 2TB Sabrent Rokect 4 plus nvme, 4TB HDD HGST
    PSU
    Corsair RM750
    Case
    Bloody rage
    Cooling
    Water cooling gamdias 240
    Keyboard
    razer ornata
    Mouse
    razer da v2
    Browser
    FF and Chrome
    Antivirus
    Malwarebytes
so I stopped all the services
There is one new service called MDCoreSvc.
Code:
reg add "HKLM\System\CurrentControlSet\Services\MDCoreSvc" /v "Start" /t REG_DWORD /d "4" /f
reg add "HKLM\System\CurrentControlSet\Services\WdFilter" /v "Start" /t REG_DWORD /d "4" /f
reg add "HKLM\System\CurrentControlSet\Services\WdNisDrv" /v "Start" /t REG_DWORD /d "4" /f
reg add "HKLM\System\CurrentControlSet\Services\WdNisSvc" /v "Start" /t REG_DWORD /d "4" /f
reg add "HKLM\System\CurrentControlSet\Services\WinDefend" /v "Start" /t REG_DWORD /d "4" /f
But I suspect it was removed by smartscreen or smartappcontrol, they work independently on Defender.
P.S. You should click on Dismiss in all Settings to confirm you made the change, otherwise Windows might revert it.
 

My Computer

System One

  • OS
    Windows 11 Home
    Computer type
    PC/Desktop
    CPU
    AMD Ryzen 5 8600G (07/24)
    Motherboard
    ASROCK B650M-HDV/M.2 3.15 (07/24)
    Memory
    2x32GB Kingston FURY DDR5 5600 MHz CL36 @4800 CL40 (07/24)
    Graphics Card(s)
    ASROCK Radeon RX 6600 Challenger D 8G @60FPS (08/24)
    Sound Card
    Creative Sound BlasterX AE-5 Plus (05/24)
    Monitor(s) Displays
    24" Philips 24M1N3200ZS/00 (05/24)
    Screen Resolution
    1920×1080@165Hz via DP1.4
    Hard Drives
    Kingston KC3000 NVMe 2TB (05/24)
    ADATA XPG GAMMIX S11 Pro 512GB (07/19)
    PSU
    Seasonic Core GM 550 Gold (04/24)
    Case
    Fractal Design Define 7 Mini with 3x Noctua NF-P14s/12@555rpm (04/24)
    Cooling
    Noctua NH-U12S with Noctua NF-P12 (04/24)
    Keyboard
    HP Pavilion Wired Keyboard 300 (07/24) + Rabalux 76017 Parker (01/24)
    Mouse
    Logitech M330 Silent Plus (04/23)
    Internet Speed
    500/100 Mbps via RouterOS (05/21) & TCP Optimizer
    Browser
    Edge & Brave for YouTube & LibreWolf for FB
    Antivirus
    NextDNS
    Other Info
    Backup: Hasleo Backup Suite (PreOS)
    Headphones: Sennheiser RS170 (09/10)
    Phone: Samsung Galaxy Xcover 7 (02/24)
    Chair: Huzaro Force 4.4 Grey Mesh (05/24)
    Notifier: Xiaomi Mi Band 9 Milanese (10/24)
    2nd Monitor: AOC G2460VQ6 @75Hz (02/19)
P.S. You should click on Dismiss in all Settings to confirm you made the change, otherwise Windows might revert it.
Yes this happen now . turn off defender become "not configured" . Where is dismiss all settings ?

1735136096846.webp
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    5900x
    Motherboard
    MAG X570S TOMAHAWK MAX WIFI
    Memory
    32 GB G.Skill
    Graphics Card(s)
    RX 6800 XT
    Sound Card
    Creative Sound Blaster Z
    Monitor(s) Displays
    BENQ and AOC QHD 120Hz
    Screen Resolution
    QHD
    Hard Drives
    2TB Intel 660p and 2TB Sabrent Rokect 4 plus nvme, 4TB HDD HGST
    PSU
    Corsair RM750
    Case
    Bloody rage
    Cooling
    Water cooling gamdias 240
    Keyboard
    razer ornata
    Mouse
    razer da v2
    Browser
    FF and Chrome
    Antivirus
    Malwarebytes
Where is dismiss all settings ?
In your screenshots, it has to be done manually otherwise it looks to Windows as if an app or a malware made the change.
 

My Computer

System One

  • OS
    Windows 11 Home
    Computer type
    PC/Desktop
    CPU
    AMD Ryzen 5 8600G (07/24)
    Motherboard
    ASROCK B650M-HDV/M.2 3.15 (07/24)
    Memory
    2x32GB Kingston FURY DDR5 5600 MHz CL36 @4800 CL40 (07/24)
    Graphics Card(s)
    ASROCK Radeon RX 6600 Challenger D 8G @60FPS (08/24)
    Sound Card
    Creative Sound BlasterX AE-5 Plus (05/24)
    Monitor(s) Displays
    24" Philips 24M1N3200ZS/00 (05/24)
    Screen Resolution
    1920×1080@165Hz via DP1.4
    Hard Drives
    Kingston KC3000 NVMe 2TB (05/24)
    ADATA XPG GAMMIX S11 Pro 512GB (07/19)
    PSU
    Seasonic Core GM 550 Gold (04/24)
    Case
    Fractal Design Define 7 Mini with 3x Noctua NF-P14s/12@555rpm (04/24)
    Cooling
    Noctua NH-U12S with Noctua NF-P12 (04/24)
    Keyboard
    HP Pavilion Wired Keyboard 300 (07/24) + Rabalux 76017 Parker (01/24)
    Mouse
    Logitech M330 Silent Plus (04/23)
    Internet Speed
    500/100 Mbps via RouterOS (05/21) & TCP Optimizer
    Browser
    Edge & Brave for YouTube & LibreWolf for FB
    Antivirus
    NextDNS
    Other Info
    Backup: Hasleo Backup Suite (PreOS)
    Headphones: Sennheiser RS170 (09/10)
    Phone: Samsung Galaxy Xcover 7 (02/24)
    Chair: Huzaro Force 4.4 Grey Mesh (05/24)
    Notifier: Xiaomi Mi Band 9 Milanese (10/24)
    2nd Monitor: AOC G2460VQ6 @75Hz (02/19)
In your screenshots, it has to be done manually otherwise it looks to Windows as if an app or a malware made the change.
sorry I dont understand. I change it manually but it keep return to "not configured" after restart
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    5900x
    Motherboard
    MAG X570S TOMAHAWK MAX WIFI
    Memory
    32 GB G.Skill
    Graphics Card(s)
    RX 6800 XT
    Sound Card
    Creative Sound Blaster Z
    Monitor(s) Displays
    BENQ and AOC QHD 120Hz
    Screen Resolution
    QHD
    Hard Drives
    2TB Intel 660p and 2TB Sabrent Rokect 4 plus nvme, 4TB HDD HGST
    PSU
    Corsair RM750
    Case
    Bloody rage
    Cooling
    Water cooling gamdias 240
    Keyboard
    razer ornata
    Mouse
    razer da v2
    Browser
    FF and Chrome
    Antivirus
    Malwarebytes
I used now the registry method and it say not running

Code:
AMRunningMode
-------------
Not running
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    5900x
    Motherboard
    MAG X570S TOMAHAWK MAX WIFI
    Memory
    32 GB G.Skill
    Graphics Card(s)
    RX 6800 XT
    Sound Card
    Creative Sound Blaster Z
    Monitor(s) Displays
    BENQ and AOC QHD 120Hz
    Screen Resolution
    QHD
    Hard Drives
    2TB Intel 660p and 2TB Sabrent Rokect 4 plus nvme, 4TB HDD HGST
    PSU
    Corsair RM750
    Case
    Bloody rage
    Cooling
    Water cooling gamdias 240
    Keyboard
    razer ornata
    Mouse
    razer da v2
    Browser
    FF and Chrome
    Antivirus
    Malwarebytes

Latest Support Threads

Back
Top Bottom