Skip to main content

Disable Defender Antivirus file activity monitoring

Overview​

About this category

This category contains privacy scripts for Windows.

These changes use Windows system commands to update your settings.

This category contains scripts that disable various file activity monitoring features of Defender Antivirus.

These features are designed to protect your system by monitoring file activities, but they may also compromise your privacy and affect system performance.

Disabling these components enhances privacy by limiting the collection of data about your system, usage, and files.

These scripts may also improve system performance during file operations.

However, disabling these features may reduce your system's security. Without these monitoring features, Defender Antivirus may be less effective at detecting and blocking certain types of malware or unauthorized file activities.

Caution

Disabling these features can make your system more vulnerable to malware, ransomware, and unauthorized file access.

Not Advised

This category should only be used by advanced users. None of its scripts are recommended for daily use as it breaks important functionality. Do not run it without having backups and system snapshots.

Apply now​

These scripts are written using Batch (batchfile) scripting language.

Choose one of two ways to apply:

  1. Automatically via privacy.sexy: The easiest and safest option.
  2. Manually by downloading: Requires downloading a file.

Alternative 1. Apply with Privacy.sexy​

privacy.sexy is free and open-source application that lets securely apply this action easily.

Open privacy.sexy

It allows selectively choose parts of this action to conduct. You can fully restore this action (revert back to the original behavior) using the application.

privacy.sexy instructions
  1. Open or download the desktop application
  2. Search for the category name: Disable Defender Antivirus file activity monitoring.
  3. Check the category by clicking on the checkbox of the category.
  4. Click on Run button at the bottom of the page.

Alternative 2. Download​

Consider restarting your computer for all changes to take affect.

Reversible

This action is completely reversible, you can restore your changes to the initial/default state. The restore/revert methods provided here can help you fix issues.

If something goes wrong, use the Revert script provided above.

All​

This script includes Standard, Strict recommendation levels along with unrecommended scripts.

Not Advised

This script should only be used by advanced users. Some of these changes are NOT recommended for daily use as it breaks important functionality. Do not run it without having backups and system snapshots.

Download all scripts:

Download script

Restore these changes if you decide to revert them by downloading the restore script:

Download restore script

Explore further​

This category includes total of 4 scripts but no subcategories.

Explore its 4 scripts:

Disable Defender Antivirus copy accelerator library

This script removes the Defender Antivirus copy accelerator library ("MpDetoursCopyAccelerator"). This library is referred to by Microsoft as Malware Protection Copy Accelerator Detours Dll. It is a component of Defender Antivirus service. This component monitors and intercepts file copy operations, potentially blocking the copying of certain files. It optimizes scanning by examining copied files for potential threats after a certain number of files have been transferred. The library use...

Disable Defender Antivirus copy accelerator utility

This script disables the "MpCopyAccelerator.exe" process. This process is called the Microsoft Malware Protection Copy Accelerator Utility. It is part of Defender Antivirus service, introduced in update KB4052623, version 4.18.2201.10 update. It monitors and intercepts file copy operations to enhance security. It logs copy operations and sends the data to Microsoft as part of its Asimov telemetry. Asimov is a Microsoft feedback mechanism that tracks user activity in real time. Th...

Disable Defender Antivirus file activity tracking library

This script removes the "MpDetours.dll" library, effectively disabling its functionality. "MpDetours.dll" is called Malware Protection Detours Dll by Microsoft. It is part of Defender Antivirus service. It is a library designed to offer runtime protection and enforce security policies. The library monitors and controls system operations to prevent unauthorized access and data leaks. It achieves this by intercepting actions and enforcing security policies. It specifically monitors: Contro...

Disable Defender Antivirus file risk estimation library

This script disables the file risk estimation library, "winshfhc.dll". This library is a component of Defender Antivirus service. It is officially named File Risk Estimation. It is responsible for: Generalizing system imaging or deployment • Logging system data • Configuring registry entries for Defender Antivirus • Performing cleanup operations related to Defender Antivirus • Interacting with Windows Security Disabling this library may enhance your privacy by reducing system...

Explore Categories​

This action belongs to Disable Defender Antivirus category. This category provides scripts to disable Defender Antivirus. Defender Antivirus, integrated into Windows, provides protection against viruses, ransomware, and other types of malware. Disabling Defender Antivirus may improve system performance and privacy by stopping related data collection... Read more on category page ▶

Support​

This website relies on your support.

Support now

Your donation helps keep the project alive and improves its content ❤️.

Share this page:

EmailLinkedInRedditPinterestWhatsAppTelegramWeiboVK