Releases: ionuttbara/windows-defender-remover
version 12.8.1
fixes some listed issues (unresponse because of jobs and studies)
restructed some informations from pull requests
improved the way of removal of defender without uac disablation.
version 12.8.0
add ability to remove antivirus without disable UAC or another Security mitigations by default
version 12.7.2
Release 12.7
What's new?
Fixed #130 which when you pressing another key than 'Y' and 'y' the script will start. Also added a warning about reboot.
Remover removes Microsoft Pluton services and enforcing the OS to NOT use it. Also if you PC have a Pluton chip, disable it from BIOS (disablation from BIOS is for Lenovo Laptops for now) because after the removal with the script , Windows Update will re download Pluton Service again sometime. also removes the smartscreen classes in build 26052 canary build.
Release 12.6.9
Announcent
The development of project is ended. This seems no more major changes of the script will be added, so i will release versions of the script if this version is not working in a specific Windows Canary Build. The pause was cause by the university exams and patience of releasing of Windows Canary Build. So the development of this project will have same priority like Melody Script and Edge/OneDrive Uninstaller.
What's new?
For people who not create a system restore point, its not a way to solve / revert things due script. If a method is revertible, and MSFT patches that , will be harder for me to found new methods to bypass and remove Defender Antivirus on Windows.
But good news. In some versions of windows it don't need disablation of Tamper Protection!
- removed and deprecated 'safe' method because of microsoft's patchable tamper protection. so now, no more safe methods.
- if your antivirus said the .exe of remover is virus. don't worry. you can download the source code and run the Script_Run.bat file from archive.
- updating the way of disabling VBS
- enforcing removal of files
- AIO exe and package for (x86,x64 and ARM64)
- fixed issues of #128, #127 where firewall shows problems and removal of C:\ProgramData\Microsoft\Windows instead C:\ProgramData\Microsoft\Windows Defender.
- all issues about N , U and more methods will be closed due depreciation and removal from the script.
- re-write the removal of SecHealthUI app.
- updated documentation
Note of testing
These notes are for x64 and ARM64 (Windows 11 only) releases.
✅ Windows 8.1 and ALL version of Windows 10
✅ Windows 11 (21H2, 22H2 and 23H2)
✅ Windows Dev Channel
✅ Windows 11 Canary Channel / Windows 12 Alpha Builds
release 12.6.4
What's new?
this release was removed due a another problem which remover is removing content from c:\programdata and breaks uwp and microsoft store apps , where the script was configure NOT TO DO that.
Known issues
Note of testing
These notes are for x64 and ARM64 (Windows 11 only) releases.
✅ Windows 8.1 and ALL version of Windows 10 (all options)
✅ Windows 11 (all options)
❓ Windows Dev Channel (untested)
✅ Windows 11 Canary Channel / Windows 12 Alpha Build (its OK for Y option)
release 12.6.3
What's new?
fixes when a bounch of cmds are opened
Known issues
'Safe methods' is not working with Windows 11 due a problems with permmissons to disable and restore. This will be fixed and updated in 12.6.4.
Way to force disable VBS.
If VBS (Virtualization Based Security ) is enabled after you applied the script and applied policy, if you use Hyper-V Virtual Machine or WSL , this is forcelly enabled.
If you don't use: disable Secure Boot from BIOS. These will disable VBS if you applied the script, also it disables automatic encryption (so big ATTENTION for BITLOCKER-enabled users). After disablation you'll get this in msinfo32:
Note of testing
These notes are for x64 and ARM64 (Windows 11 only) releases.
✅ Windows 8.1 and ALL version of Windows 10 (all options)
✅ Windows 11 (all options)
✅ Windows 11 Dev Channel (its OK for Y option)
✅ Windows 11 Canary Channel / Windows 12 Alpha Build (its OK for Y option)
release 12.6.2
Defender Remover removes Microsoft Security Filters (such as MsSecFlt and MsSecFltWfp , 2 services which are connected with Windows Security Application and introduced in Windows Canary).
release 12.6.1
What's new?
fix where in Canary Channel and in Windows 11 23H2 some content from C:\ProgramData\Microsoft are removed using Y and U options. (check #109 )
fix some code typos
Warning!
Some antiviruses/antimalware engines can take this app as a malware/virus. So i recommend antivirus disablation before to downloaded ir! Also starting Windows 11( 22H2 Moment 2 or newer) it need to disable Tamper Proteciton from Windows Security Settings.
You can clone this repo using git and run Script_Run from the folder. (this applies for x64-bit systems).
Known issues
Disablation/Enablation using Safe methods are not working for some PCs. Next version of app will fix these problems with 'safe' methods.
Workaround
If you use Canary Channel of Windows 11, you'll see some errors with UWP Apps to get in running and crashing Windows Explorer due problems and resources. Also if you updating Microsoft Store apps after removed Defender you'll get this error:
These applies to Defender Remover 12.6 only with Y option applied.
To solve this problem this powershell command will re-register all UWP Apps which you have installed in System
Get-AppxPackage -AllUsers| Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}
and reboot.
Way to force disable VBS.
If VBS (Virtualization Based Security ) is enabled after you applied the script and applied policy, if you use Hyper-V Virtual Machine or WSL , this is forcelly enabled.
If you don't use: disable Secure Boot from BIOS. These will disable VBS if you applied the script, also it disables automatic encryption (so big ATTENTION for BITLOCKER-enabled users). After disablation you'll get this in msinfo32:
Note of testing
These notes are for x64 and ARM64 (Windows 11 only) releases.
✅ Windows 8.1 and ALL version of Windows 10 (all options)
✅ Windows 11 (all options)
✅ Windows 11 Dev Channel (its OK for Y option, desktop is not crashing anymore)
✅ Windows 11 Canary Channel / Windows 12 Alpha Build (its OK for Y option)
release12.6
What's new?
Deprecated Security Center Settings because are taken as virus in MalwareBytes and BitDefender
Fixed some many errors and bug fixes.
Made an x86-32bit version of the script.
Completly switched from PowerRun to GetTrustedInstaller.
Warning!
Some antiviruses/antimalware engines can take this app as a malware/virus. So i recommend antivirus disablation before to downloaded ir! Also starting Windows 11( 22H2 Moment 2 or newer) it need to disable Tamper Proteciton from Windows Security Settings.
Note of testing
These notes are for x64 and ARM64 (Windows 11 only) releases.
✅ Windows 8.1 and ALL version of Windows 10 (all options)
✅ Windows 11 (all options) ( uwp error solved and removed for now, needs more feedback)
✅ Windows 11 Dev Channel (needs feedback)
⛔ Windows 11 Canary Channel / Windows 12 Alpha Build DO NOT USE!. its a bug which removes another content from C:\ProgramData\Microsoft\Windows in all options. build 26010+.
⛔ Microsoft Patched recently the way to safe disable Defender. Working for another method. Remover is not affected. (affects Windows 11 only, in Windows 10 is working fine.)