Disable windows defender windows 10 github

❌️ Defender Remover / Defender Disabler

❓️ What does the app do?

This application removes / disables Windows Defender, including the Windows Security App, Windows Virtualization-Based Security (VBS), Windows SmartScreen, Windows Security Services, Windows Web-Threat Service, Windows File Virtualization (UAC), Microsoft Defender App Guard, Microsoft Driver Block List, System Mitigations and the Windows Defender page in the Settings App on Windows 10 or later.

🖍 System Requirements

• Windows 8.x, 10 and 11 (all versions).

📃 Instructions

Note
A system restore point is recommended before you run the script.

1. Download the packed script from Releases
2. Run the «.exe» as administrator
3. Follow the instructions displayed

Please file an issue if you experience any problems.

📃 Automation of the script

You can disable or enable Windows Defender with arguments.

Enable/Disable Windows Defender and Security Components

# ENABLE
Defender.Remover.exe /r <# or /R #>

# DISABLE
Defender.Remover.exe /n <# or /N #>

Enable/Disable Windows Defender Antivirus only

# ENABLE
Defender.Remover.exe /e <# or /E #>

# DISABLE
Defender.Remover.exe /m <# or /M #>

Disable or Remove Windows Defender Application Guard Policies (advanced)

If you have any problems when opening an app (extremely rare) and get the message «The app can not run because Device Guard» or «Windows Defender Application Guard Blocked this app», you have to remove 4 files with the same name, from different locations.

• In EFI Partition

Remove-Item -LiteralPath "$((Get-Partition | ? IsSystem).AccessPaths[0])Microsoft\Boot\WiSiPolicy.p7b"

• In Code Integrity Folder

Remove-Item -LiteralPath "$env:windir\System32\CodeIntegrity\WiSiPolicy.p7b"

• In Windows Folder

Remove-Item -LiteralPath "$env:windir\Boot\EFI\wisipolicy.p7b"

• In WinSxS Folder

Remove-Item -Path "$env:windir\WinSxS" -Include *winsipolicy.p7b* -Recurse

❓ Frequently Asked Questions

⭕ Why is the downloaded executable being flagged as a virus?

That is a false positive.

Some security apps flag this app as a virus because of the way the «.exe» files are created.

⭕ Why is the patch not working when Windows is updated?

Windows Update includes a Intelligence Update which blocks certain actions and modifies Windows Defender/Security policies.
If the script is not working for you, check if you have the Windows Security Intelligence Update installed. If you do, disable tamper protection, and re-run the script.

⭕ How to use the package remover without downloading the executable from the release?

Run the desired «.bat» file from cmd with PowerRun (by dragging to the executable). You must reboot for the changes to take effect.

Disable Windows Defender on Windows 10

NOTICE: Permenantly disabling Windows Defender is
no longer possible
in recent Windows 10 versions. Instead, you can only rely on excluding specific
folders or disabling it temporarily.

Why?

Windows Defender is infamous for its tendency to monopolize CPU and I/O
resources. Moreover, some of its «security» measures are undesirable and may
put user privacy at risk. This has many practical consequences, such as:

• slower general operation due to increased resource usage,
• excessive CPU usage while copying files, slowing down the entire system,
• increased heat and noise output, as well as reduced battery life on laptops,
• deletion of files detected as «malware» without the user’s consent, even in
  ZIP archives or on attached network drives,
• user privacy at risk, due to automatic sending of «malware samples» to
  Microsoft,
• …

Windows 10 allows you to disable Windows Defender in the Settings, but this is
only temporarily effective; it will be automatically re-enabled eventually –
the exact timing for this is random and unpredictable.

This repository contains a «disable» .reg file which can be used to
permanently disable Windows Defender. But don’t worry, you can revert it
using the included «restore» .reg file.

Usage

Disabling Windows Defender permanently

1. Clone this repository or
   download a ZIP archive.
2. Double-click disable_windows_defender_on_windows_10.reg then accept the
   administrator and the warning prompts.
3. Reboot your system.

Restoring Windows Defender (in case something goes wrong)

1. Clone this repository or
   download a ZIP archive.
2. Double-click restore_windows_defender_on_windows_10.reg then accept the
   administrator and the warning prompts.
3. Reboot your system.

Frequently asked questions

Isn’t it insecure to disable Windows Defender?

With today’s security threats, antivirus software is becoming
less relevant over the years. Many antiviruses are now fooled by malware
executables, and other forms of malware aren’t detected by most antiviruses.
While perfect security doesn’t exist, it still is a good idea to avoid exposing
yourself to modern threats such as ransomware.

To make your computing more secure, consider the following options:

• Block tracking and malware scripts using
  uBlock Origin.
  This will also make browsing faster and decrease network traffic.
• Block tracking and malware domains using
  Dan Pollock’s hosts file.
  This has the upside of working on all software on your computer,
  not just Web browsers.

License

Copyright © 2017-2020 Hugo Locurcio and contributors

Files in this repository are licensed under CC0 1.0 Universal,
see LICENSE.md for more information.

Defeat-Defender-1.2

• If you like the tool and for my personal motivation so as to develop other tools please leave a +1 star

Powerfull Batch File To Disable Windows Defender,Firewall,Smartscreen And Execute the payload

Usage :

• Run run.bat and enter the direct link of your malware
• Run the script «Defeat-Defender.bat» . It will ask for Admin Permission.If permission Granted The script will work Silently and dismantle all protection…

After it got admin permission it will disable defender

• PUAProtection
• Automatic Sample Submission
• Windows FireWall
• Windows Smart Screen(Permanently)
• Disable Quickscan
• Add exe file to exclusions in defender settings
• Disable Defender Notification (Added Recently)
• Disable UAC(Reboot Required)
• Disable Ransomware Protection
• Disable TaskManager
• Disable registry etc..

Proof-Of-Concept

defeat-defender_W89Khs8L_TvOB.mp4

Bypasssing Windows-Defender Techniques :

Recently Windows Introduced new Feature called «Tamper Protection».Which Prevents the disable of real-time protection and modifying defender registry keys using powershell or cmd…If you need to disable real-time protection you need to do manually….But We will disable Real Time Protection using NSudo without trigerring Windows Defender

Running Defeat-Defender Script

Tested on Windows 11 Pro

After Reboot

Warning

This Script will completely Disable Windefend Services . And also it is very difficult to revert the changes..Think twice before you run the script

Behind The Scenes :

When Batch file is executed it ask for admin permissions.After getting admin privileage it starts to disable windows defender real time protectin , firewall , smartscreen and starts downloading our backdoor from server and it will placed in startup folder.The backdoor will be executed after it has downloaded from server..And will be started whenever system starts..

Check out this article :

https://secnhack.in/create-fud-fully-undetectable-payload-for-windows-10/

Note :

If you want to enable Defender Smart Screen.Use Smart Screen.bat file..

Discalimer :

Use this only for educational Purpose…Love you Guys Bye…..

Contact :

Inspired From TechChip

Special thanks to Jeffrey-d-howard(Senior Vulnerability Management Lead) For Posting Defeat-Defender on his linked page

❤️Supporters❤️