Fully disabled Defender but "Windows Defender Antivirus Service" runs

This batch script disables the Windows Defender and its services.

Code:

@Echo Off

net sess>nul 2>&1||(powershell start cmd -ArgumentList """/c %~0""" -verb Runas & exit)

:_Start
Cls & Mode CON  LINES=11 COLS=60 & Color 0E &Title Created By FreeBooter
Echo.
Echo.       
Echo         Type (D) letter to Disable Windows Defender   
Echo.       
Echo.
Echo.
Echo.         
Echo         Type (E) letter to Enable Windows Defender    
Echo.         



Set /p input= RESPONSE: 
If /i  Not %input%==D (Goto :_Ex) Else (Goto :_Disbale)

:_Ex
If /i  Not %input%==E  (Goto :_Start) Else (Goto :_Enable)





:_Disbale
:: Disable Windows Defender with  Group Policy. 
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t REG_DWORD /d "1" /f > Nul
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableBehaviorMonitoring" /t REG_DWORD /d "1" /f > Nul
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableOnAccessProtection" /t REG_DWORD /d "1" /f > Nul
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableScanOnRealtimeEnable" /t REG_DWORD /d "1" /f > Nul
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableRealtimeMonitoring" /t REG_DWORD /d "1" /f  > Nul

Cls & Mode CON  LINES=5 COLS=49 & Color 0E & Title - WARNING -
 Echo.
 Echo. 
 Echo            Windows Defender Disabled
Ping -n 5  localhost > Nul
Cls
Goto :Reboot


:_Enable
:: Enable Windows Defender with  Group Policy. 
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t REG_DWORD /d "0" /f > Nul
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableBehaviorMonitoring" /t REG_DWORD /d "0" /f > Nul
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableOnAccessProtection" /t REG_DWORD /d "0" /f > Nul
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableScanOnRealtimeEnable" /t REG_DWORD /d "0" /f > Nul
Reg.exe delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableRealtimeMonitoring" /f > Nul


Cls & Mode CON  LINES=5 COLS=49 & Color 0E & Title - WARNING -
 Echo.
 Echo. 
 Echo            Windows Defender Enabled

Ping -n 5  localhost > Nul
Cls



:Reboot 
CHOICE /C YN /M "Press Y to Reboot, N for exiting script."


If %errorlevel% == 1 ( Shutdown /r /t 0) Else (Exit)

FreeBooter said:

This batch script disables the Windows Defender and its services.

Thank you! This would have been fantastic --- if it had worked. I saved as bat file and ran as Administrator.
Got the prompt and hit "D" for Disable.
But it's still running...

TairikuOkami said:

Make sure, that the tamper protection is disabled, then run this twice as admin, then restart.[Batch] Windows Defender Disable - Pastebin.com

That worked! Thank you! I didn't know about Tamper protection, turns out it was disabled. Apparently Microsoft pushed it quite recently. I can't remember turning it off, but it was off when I looked, after running the script.

Any idea why this happened? What is Microsoft up to?

TairikuOkami said:

Tamper protection was introduced in 1903, upon a clean install, it can be disabled via registry, but once WD is updated, it has to be done manually. It serves as a protection, so malware could not disable it easily. Considering, that you somewhat disabled WD a year ago, it failed to update and kept trying (@25%CPU).

Hi,
I have two doubts:
1 - There are two bat files, which one should I use?
2 - At the end of the first bat, do you inform to run twice?
would be to run the entire bat twice or are the bat part
Disable WD services?

thank's
Clamarc

See this post:
How to stop “windows defender antivirus service”?

muchomurka said:

See this post:
How to stop “windows defender antivirus service”?

Hi muchomurka,

But aren't SecurityHealthService and Windows Defender Antivirus Service different applications? Can I disable SecurityHealthService without causing other problems on my System?

thank's
Clamarc

Can I disable SecurityHealthService without causing other problems on my System?

It will block Security options in Settings app. If you really want to have Security Center enabled, remark or delete the line.