Defender Remover Changelog

What's new in Defender Remover 12.8.0

May 13, 2024
  • Add ability to remove antivirus without disable UAC or another Security mitigations by default

New in Defender Remover 12.7 (Feb 9, 2024)

  • Fixed #130 which when you pressing another key than 'Y' and 'y' the script will start. Also added a warning about reboot.
  • Remover removes Microsoft Pluton services and enforcing the OS to NOT use it. Also if you PC have a Pluton chip, disable it from BIOS (disablation from BIOS is for Lenovo Laptops for now) because after the removal with the script , Windows Update will re download Pluton Service again sometime. also removes the smartscreen classes in build 26052 canary build.

New in Defender Remover 12.6.9 (Jan 30, 2024)

  • Announcent
  • The development of project is ended. This seems no more major changes of the script will be added, so i will release versions of the script if this version is not working in a specific Windows Canary Build. The pause was cause by the university exams and patience of releasing of Windows Canary Build. So the development of this project will have same priority like Melody Script and Edge/OneDrive Uninstaller.
  • What's new?
  • For people who not create a system restore point, its not a way to solve / revert things due script. If a method is revertible, and MSFT patches that , will be harder for me to found new methods to bypass and remove Defender Antivirus on Windows.
  • But good news. In some versions of windows it don't need disablation of Tamper Protection!
  • removed and deprecated 'safe' method because of microsoft's patchable tamper protection. so now, no more safe methods.
  • if your antivirus said the .exe of remover is virus. don't worry. you can download the source code and run the Script_Run.bat file from archive.
  • updating the way of disabling VBS
  • enforcing removal of files
  • AIO exe and package for (x86,x64 and ARM64)
  • fixed issues of #128, #127 where firewall shows problems and removal of C:ProgramDataMicrosoftWindows instead C:ProgramDataMicrosoftWindows Defender.
  • all issues about N , U and more methods will be closed due depreciation and removal from the script.
  • re-write the removal of SecHealthUI app.
  • updated documentation

New in Defender Remover 12.6.3 (Dec 26, 2023)

  • fixes when a bounch of cmds are opened

New in Defender Remover 12.6.01 (Nov 22, 2023)

  • Deprecated Security Center Settings because are taken as virus in MalwareBytes and BitDefender
  • Fixed some many errors and bug fixes.
  • Made an x86-32bit version of the script.
  • Completly switched from PowerRun to GetTrustedInstaller.

New in Defender Remover 12.6.0 RC (Nov 21, 2023)

  • Made the app to be less detecteble VirusTotal result
  • Tested hardness for Canary Channel 25905 (timebombed upon 14.09.2023, but tested for Tamper Protection Bypasses and more)
  • switched from PowerRun to superUser64 (so documentation will be updated, and also will be provided content)

New in Defender Remover 12.5.7 (Nov 16, 2023)

  • Added Signature of executable to make original and evite any modified 3rd party version of script (and make less virus detectable too)

New in Defender Remover 12.5.6 (Sep 10, 2023)

  • Removed some security security settings which are depreciated by Microsoft a long time (ServiceKeepAlive and DisableAntiSpyware) are not working anymore with Windows 10 1703 or newer, but the removal script is unaffected.
  • Added disablation of Remote UAC
  • Added disablation/enablation of UAC in ~newer methods (are revertible)

New in Defender Remover 12.5.5 (Sep 8, 2023)

  • Fixing the spelling errors in code (when WdFilter is not removed). not this should to be removed.

New in Defender Remover 12.5.4 (Aug 26, 2023)

  • added disablation/enablation of Windows Defender's Tasks in safe methods.

New in Defender Remover 12.5.3 (Aug 24, 2023)

  • temporary removed iso creator tool because it starts to produce problems
  • added ability to force disable Dev Drive Protection in safe method.. (and legacy)
  • the text for legacy removing defender is not in the app because i want to start to switch some settings in new safe methods (where microsoft store apps , and more things are working fine in Windows 11), so if you want to apply in Windows 10, or in lastest Canary Build, you can press Y.

New in Defender Remover 12.5.2 (Aug 16, 2023)

  • Added disablation and enablation of Security Health Tray Startup, when the safe method of disable security components.
  • Added disabling of FTH (Fault Torelant Heap Mitigation ) disable in remover version

New in Defender Remover 12.5.1 (Aug 3, 2023)

  • Reverted from NSudo to PowerRun because of lack of running in ARM64

New in Defender Remover 12.5 (Jul 11, 2023)

  • Overhaul:
  • NEW! Replaced PowerRun integration with nSudo for pemission access.
  • NEW! ISO Tool is simplified and complicated (with no .esd file support, for now) (fixes #55)
  • NEW! Made Removal of the script efficient (contr. by @ropucyka)
  • Fixes:
  • Fix the issue #56.
  • Fix the issue #66 , #58 , #57 , by rethinking the disabler part. (It disables antivirus , or antivirus with Windows Security Service (for who don't want Windows Security App)
  • The report about 12.5 helped so much! so the #62 will be closed.
  • The Firewall Context Menu is moved to Melody Script (https://www.github.com/jbara2002/melody_windows)
  • The Safe methods doesn't disable UAC, but it remove mitigations.
  • Workarounds:
  • For those are applied the removed in previous version (<12.4.7) and have problems with UWP, check if your windows update history.
  • If the Windows Security Intelligence Update (that thing is cause to broken things after script) is installed , there is a problem and can be solved by restoring the system at the point before applying the script. If you want to disable antivirus you can use safe methods (pressing N for disabling all components and M to disable Defender Antivirus Only), and that can be restored by rerun the script. Also the new safe methods doesn't add policies and system registry configurations (the method is based by services removal and restoring), so the system will NOT be harmed. (so the issues related will be closed after release) You can use the Y method , but you need to disable Windows Update or make to Windows will not update at the moment.

New in Defender Remover 12.4.6 (May 22, 2023)

  • optimized app size (code) less 200KB.
  • fixing LSA Configuration where breaking Network Connections, Devices and Authentification. (fixes #50 ,#44)
  • using ShadowWhisperer's way to remove Provisioned Appx-es (which fix #52 issue).

New in Defender Remover 12.4.2 (May 14, 2023)

  • FIX! Fixes issues specified in #44 ,
  • NEW! If you have a PC with Microsoft Pluton Security Procesor and Windows 11 22H2 or newer, rhis script will support removal of Defender (and pluton driver)

New in Defender Remover 12.4.1 (May 5, 2023)

  • fixed issues with uwp apps specified in #38 .
  • fixed some tracing removal of defender specified in #4 (in Windows 10 22H2 and Windows 11 Dev Channel, only)
  • improvements in performance

New in Defender Remover 12.4 (Apr 14, 2023)

  • New:
  • Improvements..
  • Added Text for script progress.
  • Fixed:
  • Removing Windowss Defender Files (including data and Program Files) it must work now. You'll get +300 MB free Space in C:

New in Defender Remover 12.3 (Apr 1, 2023)

  • FIX! #34 In some version of Windows 11 , task manager are get reverted to old version. This is fixed for now.
  • .wim image part
  • NEW! Because this software is open source, i will put the code, of wimwim.cmd file to see if the code is working with provided information about images.
  • NEW! Made some progress by removing Defender Services (including filters and Windows Security Center Services) which is working for Microsoft provided lastest Windows 11 22H2 Image , exporting automaticly in : c:defenderRemovedISOWindowsDefenderRemovedImage.iso

New in Defender Remover 12.2.3 (Mar 24, 2023)

  • NEW! Added support for ARM64 Arhitecture. (You can remove/disable/enable Windows Defender in Windows ARM PCs now, requires Windows 10 19H1 ARM or newer)
  • NEW! Modified Rules for the remover which you can update Windows with Defender Removed. (It's an one condition, the update must no contain about modifying Windows.SecHealthUI App).
  • FIX! Fixed the app taken as virus and twice applying in Winodws Insider Build 25314 (Canary Channel),
  • FIX! #35 (Disconnected Storage Error). You must uninstall and re-download the problem apps now, after the script application (if you have the problem now)

New in Defender Remover 12.2.2 (Mar 23, 2023)

  • Disabled Microsoft Vulnerable Driver BlockList. ( i don't know why some drivers mod are in that blocklist =)))
  • Disabled Early Launch Anti-Malware Protection. (i've seen the shut down time was improved so much).

New in Defender Remover 12.2.1 (Mar 22, 2023)

  • NEW! Implemented mounting of install.wim image if drive was detected.
  • NEW! You can download the script from 2 sources: Softpedia and instalki.pl.
  • FIX! Changed letter from I to J for mounting Images.
  • FIX! Changed the rule of disabling SmartScreen when is selected N or E letter from the menu. (renaming is not working)
  • This version is designed for who want to test removal of Defender via offline Windows Image (ISO, .wim). Maybe i'll finish in 1 week or two, but that will worth. =))

New in Defender Remover 12.2 (Mar 21, 2023)

  • NEW! Added Support for importing "install.wim" file for disabling / removing removing defender by pressing "I". (This is not working for now.)
  • SOON! Also the support for importing "install.esd" will be added, but the exported file will be ".wim"
  • NEW! Added Support for OSCDIMG. a Microsoft Tool which export modified .wim files and create an ISO file, without any user interventions. (This may not work for now).
  • Known issues:
  • #34 Task Manager may be restored to "old version" due an unknown issue, which is investigating.
  • #35 Investigating the Disconnected Storage error when some UWP are installed.
  • The tool part for modifying install.esd and install.wim by removing/disabling defender is not work as expected, When I is pressed, it applies the removal instead looking for drives and mounting .wim file (or converting .esd ->.wim and mounting)

New in Defender Remover 12.1 (Mar 20, 2023)

  • FIX! Modifying the UAC Disabler Rules because of someone said about UWP Startup not working. To fix the issue please check if the values are put in registry (because the script putted the values to 0)
  • FIX! and a fix for issue #32 (it says this thing is caused by removal of defender smartscreen, so i modified the rules of removal in the script now)

New in Defender Remover 12.0 (Feb 9, 2023)

  • Bugfixes:
  • #30 , #28 - fixes for Windows 11 21H2 Systems, where is making some problems
  • #27 - rewriting the disabler and enabler part as Windows Defender (only antivirus) and Windows Defender (Antivirus & Security)
  • #29 - made Firewall contextual menus optional
  • #22 - fixes problems for PCs and Laptops with BitLocker enabled
  • #20 and #26 issues are nonsense, so Microsoft Store is unaffected when the script is applied or any previous version (if that is affected, will be writed in Known Issues section of the release page)
  • #21 fixing smart screen running when is applying disabler part of defender (only antivirus and security components)

New in Defender Remover 11 / Pre12 (Jan 7, 2023)

  • This version is fixing virtualization problems, and get fixes for reliability in application fixes all:
  • smartscreen service still run on disable option windows defender #21
  • policy scripts execution denied #16
  • Destroyed laptop #20
  • NEW:
  • Added arguments support