• re-writed way to remove WindowsSecurityCenter services and applets (removing applets broke Windows Update service and Windows Store.) (Issues #83, #125,#139 and #144 will be closed due results of testing of this version.)

note

this was tested on Windows 11 21H2 and 22H2 with Updates.

What's new?

Fixed #130 which when you pressing another key than 'Y' and 'y' the script will start. Also added a warning about reboot.
Remover removes Microsoft Pluton services and enforcing the OS to NOT use it. Also if you PC have a Pluton chip, disable it from BIOS (disablation from BIOS is for Lenovo Laptops for now) because after the removal with the script , Windows Update will re download Pluton Service again sometime. also removes the smartscreen classes in build 26052 canary build.

Announcent

The development of project is ended. This seems no more major changes of the script will be added, so i will release versions of the script if this version is not working in a specific Windows Canary Build. The pause was cause by the university exams and patience of releasing of Windows Canary Build. So the development of this project will have same priority like Melody Script and Edge/OneDrive Uninstaller.

What's new?

For people who not create a system restore point, its not a way to solve / revert things due script. If a method is revertible, and MSFT patches that , will be harder for me to found new methods to bypass and remove Defender Antivirus on Windows.
But good news. In some versions of windows it don't need disablation of Tamper Protection!

• removed and deprecated 'safe' method because of microsoft's patchable tamper protection. so now, no more safe methods.
• if your antivirus said the .exe of remover is virus. don't worry. you can download the source code and run the Script_Run.bat file from archive.
• updating the way of disabling VBS
• enforcing removal of files
• AIO exe and package for (x86,x64 and ARM64)
• fixed issues of #128, #127 where firewall shows problems and removal of C:\ProgramData\Microsoft\Windows instead C:\ProgramData\Microsoft\Windows Defender.
• all issues about N , U and more methods will be closed due depreciation and removal from the script.
• re-write the removal of SecHealthUI app.
• updated documentation

Note of testing

These notes are for x64 and ARM64 (Windows 11 only) releases.
✅ Windows 8.1 and ALL version of Windows 10
✅ Windows 11 (21H2, 22H2 and 23H2)
✅ Windows Dev Channel
✅ Windows 11 Canary Channel / Windows 12 Alpha Builds

What's new?

this release was removed due a another problem which remover is removing content from c:\programdata and breaks uwp and microsoft store apps , where the script was configure NOT TO DO that.

Known issues

Note of testing

These notes are for x64 and ARM64 (Windows 11 only) releases.
✅ Windows 8.1 and ALL version of Windows 10 (all options)
✅ Windows 11 (all options)
❓ Windows Dev Channel (untested)
✅ Windows 11 Canary Channel / Windows 12 Alpha Build (its OK for Y option)

What's new?

fixes when a bounch of cmds are opened

Known issues

'Safe methods' is not working with Windows 11 due a problems with permmissons to disable and restore. This will be fixed and updated in 12.6.4.

Way to force disable VBS.

If VBS (Virtualization Based Security ) is enabled after you applied the script and applied policy, if you use Hyper-V Virtual Machine or WSL , this is forcelly enabled.
If you don't use: disable Secure Boot from BIOS. These will disable VBS if you applied the script, also it disables automatic encryption (so big ATTENTION for BITLOCKER-enabled users). After disablation you'll get this in msinfo32:

Note of testing

These notes are for x64 and ARM64 (Windows 11 only) releases.
✅ Windows 8.1 and ALL version of Windows 10 (all options)
✅ Windows 11 (all options)
✅ Windows 11 Dev Channel (its OK for Y option)
✅ Windows 11 Canary Channel / Windows 12 Alpha Build (its OK for Y option)

Defender Remover removes Microsoft Security Filters (such as MsSecFlt and MsSecFltWfp , 2 services which are connected with Windows Security Application and introduced in Windows Canary).

What's new?

fix where in Canary Channel and in Windows 11 23H2 some content from C:\ProgramData\Microsoft are removed using Y and U options. (check #109 )
fix some code typos

Warning!

Some antiviruses/antimalware engines can take this app as a malware/virus. So i recommend antivirus disablation before to downloaded ir! Also starting Windows 11( 22H2 Moment 2 or newer) it need to disable Tamper Proteciton from Windows Security Settings.
You can clone this repo using git and run Script_Run from the folder. (this applies for x64-bit systems).

Known issues

Disablation/Enablation using Safe methods are not working for some PCs. Next version of app will fix these problems with 'safe' methods.

Workaround

If you use Canary Channel of Windows 11, you'll see some errors with UWP Apps to get in running and crashing Windows Explorer due problems and resources. Also if you updating Microsoft Store apps after removed Defender you'll get this error:

These applies to Defender Remover 12.6 only with Y option applied.
To solve this problem this powershell command will re-register all UWP Apps which you have installed in System
Get-AppxPackage -AllUsers| Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}
and reboot.

Way to force disable VBS.

If VBS (Virtualization Based Security ) is enabled after you applied the script and applied policy, if you use Hyper-V Virtual Machine or WSL , this is forcelly enabled.
If you don't use: disable Secure Boot from BIOS. These will disable VBS if you applied the script, also it disables automatic encryption (so big ATTENTION for BITLOCKER-enabled users). After disablation you'll get this in msinfo32:

Note of testing

These notes are for x64 and ARM64 (Windows 11 only) releases.
✅ Windows 8.1 and ALL version of Windows 10 (all options)
✅ Windows 11 (all options)
✅ Windows 11 Dev Channel (its OK for Y option, desktop is not crashing anymore)
✅ Windows 11 Canary Channel / Windows 12 Alpha Build (its OK for Y option)

What's new?

Deprecated Security Center Settings because are taken as virus in MalwareBytes and BitDefender
Fixed some many errors and bug fixes.
Made an x86-32bit version of the script.
Completly switched from PowerRun to GetTrustedInstaller.

Warning!

Some antiviruses/antimalware engines can take this app as a malware/virus. So i recommend antivirus disablation before to downloaded ir! Also starting Windows 11( 22H2 Moment 2 or newer) it need to disable Tamper Proteciton from Windows Security Settings.

Note of testing

These notes are for x64 and ARM64 (Windows 11 only) releases.
✅ Windows 8.1 and ALL version of Windows 10 (all options)
✅ Windows 11 (all options) ( uwp error solved and removed for now, needs more feedback)
✅ Windows 11 Dev Channel (needs feedback)
⛔ Windows 11 Canary Channel / Windows 12 Alpha Build DO NOT USE!. its a bug which removes another content from C:\ProgramData\Microsoft\Windows in all options. build 26010+.
⛔ Microsoft Patched recently the way to safe disable Defender. Working for another method. Remover is not affected. (affects Windows 11 only, in Windows 10 is working fine.)

What's new?

Made the app to be less detecteble VirusTotal result
Tested hardness for Canary Channel 25905 (timebombed upon 14.09.2023, but tested for Tamper Protection Bypasses and more)
switched from PowerRun to superUser64 (so documentation will be updated, and also will be provided content)

Warning!

Some antiviruses/antimalware engines can take this app as a malware/virus. So i recommend antivirus disablation before to downloaded ir! Also starting Windows 11( 22H2 Moment 2 or newer) it need to disable Tamper Proteciton from Windows Security Settings.
(YOU CAN IGNORE THIS MESSAGE) For me the digital signature is OK, if you see unknown publisher, you must install certificate from the .exe properties you must install the certificate to Trusted Root Certification Authorities ( i will post a cmd command which you can do that soon), and it's optional

Note of testing

✅ Windows 8.1 and ALL version of Windows 10 (all options)
✅ Windows 11 21H2 & 22H2 RTM (all options)
⚠️ Windows 11 22H2 Moment 1 or later + 23H2 (problem with Y option in UWP Classes registration, please use safe methos) + problems with all methods when you update to 23H2 (not sure if that is fixed now)
⚠️ Windows 11 Dev Channel (all options working, but is limited tested)
✅ Windows 11 Canary Channel / Windows 12 Alpha Build (all options working, but entires of services will shown in registry,)

What's new?

Added Signature of executable to make original and evite any modified 3rd party version of script (and make less virus detectable too)

Warning!

Some antiviruses/antimalware engines can take this app as a malware/virus. So i recommend antivirus disablation before to downloaded ir! Also starting Windows 11( 22H2 Moment 2 or newer) it need to disable Tamper Proteciton from Windows Security Settings.
The curplit of virus detection is from Bat2Exe Converter so, i will work to search anything else to make less antivirus detectible. Where you extract the .exe content and put it into zip, the script content is safe 😊

Note of testing

✅ Windows 8.1 and ALL version of Windows 10 (all options)
✅ Windows 11 21H2 & 22H2 RTM (all options)
⚠️ Windows 11 22H2 Moment 1 or later + 23H2 (problem with Y option in UWP Classes registration, please use safe methos) + problems with all methods when you update to 23H2 (working for repairing in next 2 weeks)
⚠️ Windows 11 Dev Channel (all options working, but is limited tested)

⛔ Windows 11 Canary Channel (build 25905) (all options not working, apply twice to get into work)
✅ Windows 11 Canary Channel / Windows 12 Alpha Build (all options working, but entires of services will shown in registry)