Hello, arioom
Welcome to Microsoft Community.
It seems that your current needs are disable Microsoft Defender Antivirus. The current Defender exists in two types, one of which is the Windows Defender that comes with the system, and the other is Microsoft Defender.If your current class refers to the latter, you can disable it by uninstalling the application.
If the latter is your current class, you can disable it by uninstalling the application. However, if it is the Windows Defender that comes with the system, it is usually more troublesome, and the following is a batch process.
Note: Remember to turn off the "Real-time protection" and "Tampering protection" before disabling it. Otherwise, it will fail.
Copy the following text to NotePad > Press and hold Ctrl+Shift+S > Choose to change the extension to .bat in the Save As screen > Double-click to run as administrator > Restart your computer after it finishes running.
| @echo off <br><br><br><br> ::Windows Defender <br><br><br><br> reg add "HKLM\SYSTEM\ControlSet001\Services\MsSecFlt" /v "Start" /t REG_DWORD /d "4" /f >NUL 2>nul <br><br><br><br> reg add "HKLM\SYSTEM\ControlSet001\Services\SecurityHealthService" /v "Start" /t REG_DWORD /d "4" /f >NUL 2>nul <br><br><br><br> reg add "HKLM\SYSTEM\ControlSet001\Services\Sense" /v "Start" /t REG_DWORD /d "4" /f >NUL 2>nul <br><br><br><br> reg add "HKLM\SYSTEM\ControlSet001\Services\WdBoot" /v "Start" /t REG_DWORD /d "4" /f >NUL 2>nul <br><br><br><br> reg add "HKLM\SYSTEM\ControlSet001\Services\WdFilter" /v "Start" /t REG_DWORD /d "4" /f >NUL 2>nul <br><br><br><br> reg add "HKLM\SYSTEM\ControlSet001\Services\WdNisDrv" /v "Start" /t REG_DWORD /d "4" /f >NUL 2>nul <br><br><br><br> reg add "HKLM\SYSTEM\ControlSet001\Services\WdNisSvc" /v "Start" /t REG_DWORD /d "4" /f >NUL 2>nul <br><br><br><br> reg add "HKLM\SYSTEM\ControlSet001\Services\WinDefend" /v "Start" /t REG_DWORD /d "4" /f >NUL 2>nul <br><br><br><br> ::WindowsSystemTray <br><br><br><br> reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SecurityHealth" /f >NUL 2>nul <br><br><br><br> ::System Guard <br><br><br><br> reg add "HKLM\SYSTEM\ControlSet001\Services\SgrmAgent" /v "Start" /t REG_DWORD /d "4" /f >NUL 2>nul <br><br><br><br> reg add "HKLM\SYSTEM\ControlSet001\Services\SgrmBroker" /v "Start" /t REG_DWORD /d "4" /f >NUL 2>nul <br><br><br><br> ::WebThreatDefSvc <br><br><br><br> reg add "HKLM\SYSTEM\ControlSet001\Services\webthreatdefsvc" /v "Start" /t REG_DWORD /d "4" /f >NUL 2>nul <br><br><br><br> reg add "HKLM\SYSTEM\ControlSet001\Services\webthreatdefusersvc" /v "Start" /t REG_DWORD /d "4" /f >NUL 2>nul <br><br><br><br> for /f %%i in ('reg query "HKLM\SYSTEM\ControlSet001\Services" /s /k "webthreatdefusersvc" /f 2^>nul ^ |
find /i "webthreatdefusersvc" ') do ( <br><br><br><br> reg add "%%i" /v "Start" /t REG_DWORD /d "4" /f >NUL 2>nul <br><br><br><br> ) <br><br><br><br> :: <br><br><br><br> reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\smartscreen.exe" /v "Debugger" /t REG_SZ /d "%%windir%%\System32\taskkill.exe" /f >NUL 2>nul <br><br><br><br> reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations" /v "DefaultFileTypeRisk" /t REG_DWORD /d "6152" /f >NUL 2>nul <br><br><br><br> reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" /v "SaveZoneInformation" /t REG_DWORD /d "1" /f >NUL 2>nul <br><br><br><br> reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations" /v "LowRiskFileTypes" /t REG_SZ /d ".avi;.bat;.com;.cmd;.exe;.htm;.html;.lnk;.mpg;.mpeg;.mov;.mp3;.msi;.m3u;.rar;.reg;.txt;.vbs;.wav;.zip;" /f >NUL 2>nul <br><br><br><br> reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations" /v "ModRiskFileTypes" /t REG_SZ /d ".bat;.exe;.reg;.vbs;.chm;.msi;.js;.cmd" /f >NUL 2>nul <br><br><br><br> reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t REG_SZ /d "Off" /f >NUL 2>nul <br><br><br><br> reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen" /v "ConfigureAppInstallControlEnabled" /t REG_DWORD /d "0" /f >NUL 2>nul <br><br><br><br> reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen" /v "ConfigureAppInstallControl" /t REG_DWORD /d "0" /f >NUL 2>nul <br><br><br><br> reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen" /v "EnableSmartScreen" /t REG_DWORD /d "0" /f >NUL 2>nul <br><br><br><br> reg add "HKCU\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t REG_DWORD /d "0" /f >NUL 2>nul <br><br><br><br> reg add "HKLM\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t REG_DWORD /d "0" /f >NUL 2>nul <br><br><br><br> goto :EOF |
Disclaimer: Follow these steps to temporarily turn off real-time Microsoft Defender antivirus protection in Windows Security. However, keep in mind that if you do so, your device may be vulnerable to threats. So please turn on it immediately once issue fixed.
The above commands do not necessarily disable Windows Defender 100%, because a certain part of the registry files need to be accessed with System user privileges that can be modified, and in this case, you need to use a third-party privilege extraction tool as a baseline for executing the commands. You can search for a reputable extractor by yourself.
Hope it helps! If any update, welcome to share with us.
Best regards,
Chandy |Microsoft Community Support Specialist