Skip to main content

Disable Defender Antivirus service

Overview​

About this category

This category contains privacy scripts for Windows.

These changes use Windows system commands to update your settings.

This category disables the Defender Antivirus service and its related components.

This service is also referred to as Microsoft Defender Antivirus Service 1 2 and Windows Defender Service 2. It is a core component of Microsoft Defender Antivirus, essential for its operation 1 3.

Using these scripts offers two benefits:

  • Enhanced Privacy: Limits Microsoft's data collection on your files and system activity.
  • Improved Performance: Reduces system resource usage by limiting background processes and scans.

However, disabling these components may reduce your system's security:

  • No immediate alerts when malware or viruses are detected.
  • Weakened defense against ransomware and other cyber threats.
  • Increased vulnerability to emerging security threats.
  • Some Windows security features may stop working.
Caution

Disabling Microsoft Defender Antivirus may expose your system to malware and other security threats.

Caution: Mixed Risk Levels

Be careful running these scripts. This category includes scripts with high impact:

  • 🔴 Some not recommended scripts. They should only be used by advanced users. They may break important functionality.
  • 🟡 Some recommended scripts only if you understand its implications. Some non-critical or features may no longer function correctly after running this this category.
Implementation Details

  • Language: batch

  • Scripts Count: 11 scripts

  • Required Privileges: Administrator rights

  • Compatibility: Windows only

  • Reversibility: All changes can be reverted

Apply now​

These scripts are written using Batch (batchfile) scripting language.

Choose one of two ways to apply:

  1. Automatically via privacy.sexy: The easiest and safest option.
  2. Manually by downloading: Requires downloading a file.

Alternative 1. Apply with Privacy.sexy​

privacy.sexy is free and open-source application that lets securely apply this action easily.

Open privacy.sexy

It allows selectively choose parts of this action to conduct. You can fully restore this action (revert back to the original behavior) using the application. Additionally, you can apply only the recommended scripts, instead of applying all of the scripts.

privacy.sexy instructions
  1. Open or download the desktop application
  2. Search for the category name: Disable Defender Antivirus service.
  3. Check the category by clicking on the checkbox of the category.
  4. Click on Run button at the bottom of the page.

Alternative 2. Download​

You can choose to apply only scripts with less impact or also those with higher impact:

Strict

Recommended if you understand its implications. It may cause some non-critical features to no longer function correctly.

Scroll

All

Not recommended for daily use as it breaks important functionality. It provides military-grade privacy, for special use-cases. Do not run it without having backups and system snapshots.

Scroll

Consider restarting your computer for all changes to take affect.

Reversible

This action is completely reversible, you can restore your changes to the initial/default state. The restore/revert methods provided here can help you fix issues.

If something goes wrong, use the Revert script provided above.

Strict​

This script includes Standard and Strict recommendation levels.

Use with Caution

This script is only recommended if you understand their implications of every single change. Some non-critical or features may no longer function correctly after running this script.

Download Strict scripts:

Download script

Restore these changes if you decide to revert them by downloading the restore script:

Download restore script

All​

This script includes Standard, Strict recommendation levels along with unrecommended scripts.

Not Advised

This script should only be used by advanced users. Some of these changes are NOT recommended for daily use as it breaks important functionality. Do not run it without having backups and system snapshots.

Download all scripts:

Download script

Restore these changes if you decide to revert them by downloading the restore script:

Download restore script

Explore further​

This category includes total of 11 scripts but no subcategories.

Explore its 11 scripts:

Disable Defender Antivirus service (breaks "Set-MpPreference" cmdlet)

This script disables the Microsoft Defender Antivirus Service and its associated process ("MsMpEng.exe"). This service is known both as Microsoft Defender Antivirus Service and Windows Defender Service. It is the primary component of Defender Antivirus, essential for its functionality. Disabling this service has the following benefits: It enhances privacy by preventing Microsoft from collecting data about your system and files for malware analysis. • It improves system performance by...

Disable Defender Antivirus service in Safe Mode

This script disables Defender Antivirus from running in Safe Mode. Safe Mode is also known as Safe Boot. It starts Windows in a limited state where only essential services and drivers are loaded. By default, the Defender Antivirus service is set to run in this mode. This script improves privacy in Safe Mode by preventing Defender Antivirus from: Collecting system data • Scanning files • Sending telemetry data to Microsoft This also increases system speed in Safe Mode by reducing back...

Disable Defender Antivirus service always-on state

This script configures Windows to stop the Defender Antivirus service when antivirus protection is disabled. The Microsoft Defender Antivirus service was formerly called the Antimalware Service. This service is one of the core components of Defender Antivirus. It raises privacy concerns because it sends files to Microsoft servers for analysis. By default, Windows stops this service when antivirus features are disabled. This script enforces this default behavior to consistently and persis...

Disable Defender Antivirus service high-priority startup

This script configures Defender Antivirus to start with a lower priority. By default, Windows runs the Defender Antivirus service (also called the Antimalware Service) with normal priority. This script changes the startup priority to low. This enhances privacy by reducing background scanning and potentially limiting data collection during Windows startup. It may improve system performance by reducing resource usage for the antivirus during startup. Lowering the priority may delay antivir...

Disable Defender Antivirus service automatic launch

This script prevents the Defender Antivirus service from starting automatically. By default, Windows may automatically start the Defender Antivirus service (also called the Antimalware Service) under specific conditions. This script allows you to control when the service runs. This script enhances privacy by preventing unexpected Defender Antivirus scans and data collection. It may improve system performance by stopping the service from using system resources without your permission. However...

Disable Defender Antivirus service active state

This script disables the running state of the Defender Antivirus service. Setting the service to 'not running' prevents activation of any components dependent on the Defender service (also called the Antimalware Service). This gives you more control over Defender's operations. This script enhances privacy by preventing Defender Antivirus from running in the background, which stops potential unwanted data collection and system scans. It may also boost system performance by stopping Defender A...

Disable Defender Antivirus data storage location

This script removes a configuration value that controls where Defender stores its data. This is a configuration related to Defender Antivirus. Windows configures this setting when installing Defender Antivirus service. It specifies where data, including virus definition databases and other detection files, is installed. It is used by various Defender components like "MpClient.dll", "MpSvc.dll", "MsMpEng.exe" and "MpCmdRun.exe". Deleting this value enhances privacy by preventing these compone...

Disable Defender Antivirus service module

This script disables "MpSvc.dll". Microsoft refers to "MpSvc.dll" as the Service Module. It is part of Defender Antivirus service. It manages essential Defender Antivirus functions, including: Scans: Monitors files in real-time, protects network, manages scans • Updates: Downloads new virus definitions • Threats: Finds and removes malware • Telemetry: Collects and sends data to Microsoft • Integrations: Works with Windows Security Center and antimalware scanning (...

Disable Defender Antivirus antimalware engine

This script disables Defender's main virus-scanning component ("MpEngine.dll"). Microsoft refers to this component as Microsoft Malware Protection Engine. This is a core component of Defender Antivirus. It is enabled by default on Windows. It scans, detects, and removes malware using Microsoft's antivirus technology. The engine monitors system activity by: Scanning files, memory, emails, and web downloads • Analyzing system processes and registry keys • Tracking network activity • Collec...

Disable Defender Antivirus communication module

This script removes the "MpCommu.dll" library, disabling its functionality. Microsoft refers to this library as Communication Module. This library is a component of Defender Antivirus service. It performs several network-related functions: updates and interacting with Windows Update. Communicates with Microsoft servers over HTTP/HTTPS using REST/SOAP APIs and proxy support. • Manages updates, including scheduling and downloading antimalware definition • Submits reports to SpyNet,...

Disable Defender Antivirus service communication with apps

This script prevents Defender Antivirus from communicating with other applications. The script blocks communication by removing components that allow Defender Antivirus to share data with other programs. Windows enables applications to communicate and share data using interprocess communications (IPC). This communication is achieved through the Component Object Model (COM). COM lets programs communicate and share data with other programs. Programs communicate across computer networks. Th...

Explore Categories​

This action belongs to Disable Defender services and drivers category. This category configures Windows using 15 scripts. These scripts are organized in 1 categories. The category includes 4 subscripts and 1 subcategories that include more scripts and categories. Read more on category page ▶

Support​

This website relies on your support.

Support now

Your donation helps keep the project alive and improves its content ❤️.

Share this page:

EmailLinkedInRedditPinterestWhatsAppTelegramWeiboVK