ITADN

feature_request(25h2): removing Windows Defender on Windows 11 25H2

#263OpenKristinita 创建于 2025-11-09
K
Kristinitacommented
### 1. Summary After upgrading from Windows 22H2 with removed Windows Defender to [**Windows 11 25H2**](https://www.elevenforum.com/t/what-is-new-in-windows-11-version-25h2.40403/), I can’t fully remove Windows Defender. windows-defender-remover doesn’t kill services `MpDefenderCoreService.exe`, `MsMpEng.exe`, `NisSrv.exe`, and `SecurityHealthService.exe`. If windows-defender-remover already can successfully kill Windows Defender on 25H2, please update the documentation. ### 2. Steps to reproduce ```bat git clone https://github.com/ionuttbara/windows-defender-remover cd windows-defender-remover ``` #### 2.1. Launching `Script_run.bat` and `DefenderRemover.exe` (12.8.4) Windows Defender prevents launching these files including if they’re launched from `PowerRun.exe`. Windows Settings → `Privacy & security` → `Windows Security` → `Open Windows Security` → `Protection history`: `Trojan:BAT/DefDisable.DA!MTB`: ![Windows Defender prevents launching `Script_run.bat`](https://i.imgur.com/LvEjlle.png) `HackTool:Win32/PowerRun!rfn`: ![Windows Defender prevents launching `DefenderRemover.exe`](https://i.imgur.com/waHU5U5.png) #### 2.2. Launching `defender_remover13.ps1` (release 13.0, beta, PowerShell) I selected `Run with PowerShell` in the context menu of the file `defender_remover13.ps1` → `Y` (`[Y] Remove Windows Defender Antivirus + Disable All Security Mitigations`) → <kbd>Enter</kbd> → PC restarts after all `defender_remover13.ps1` actions → Windows starts with services `MpDefenderCoreService.exe`, `MsMpEng.exe`, `NisSrv.exe`, and `SecurityHealthService.exe`. ### 3. Environment Microsoft Windows 11, version 25H2 Hudson Valley 2 (OS Build 26200.7019) Thanks.
7 条评论