AdventCirno patreon

Give me an idea on how to get rid of Windows Defender. It randomly marks things as viruses from time to time, and it's driving me crazy.

🕑 Added 2025-03-07 16:42:25 +0000 UTC

Comments

LSP

签名

AdventCirno

Strange, sectigo says I can apply for an EV certificate. For individual?

Leo Chen

Yes it's a troll comment, But I do play all games on Linux and use MTool on it, not even virtual machine, just wine and bottles.

ganbei

我是下个火绒把它顶掉😏

Powerless

this guy..

Leo Chen

Use Linux

ragnum

Just out of personal interest, where did you find that Certificate? I checked my entire ZIP and didn't find any. Or was I looking at the wrong place? Thanks

ragnum

weird, sigcheck and signtool.exe cannot find any digital signature. Maybe it gets lost on the way? What exactly did you sign? And what file did get flagged? Good luck Tools sources: https://learn.microsoft.com/en-us/sysinternals/downloads/sigcheck https://codesigningstore.com/how-to-download-and-install-windows-signtool-exe Commands: .\signtool.exe verify /pa FILE .\sigcheck.exe -a -u FILE

Zero Clover

Sorry, I didn't describe it accurately. This looks like an OV certificate (some CAs also refer to it as IV) you used. For MS antivirus detection (including so-called "unwanted applications" or SmartScreen, etc), it expects an EV certificate or "widespread use within the community" to avoid randomly treating some files as viruses. The number of MVTools users may not be sufficient for MS machine learning to consider its usage "widespread" enough. If you can point out which specific DLL is being flagged or provide a copy directly, perhaps I can use my own EVCS certificate to conduct some tests. In my experience, using EVCS for ordinary DLLs is enough to silence MS "machine learning" detection.

AdventCirno

I'm already signed, for years.

AdventCirno

It's useless because it's already signed.

Jowy

I made an exclusion whjt the original tool folder and when updates comes up, i update the tool in the original folder. that way windows defender dont screw the others folders.

Zero Clover

You only need to add a code signing to your binary file to solve this problem. Microsoft now offers Azure-managed signing services and supports personal authentication. https://azure.microsoft.com/en-us/products/trusted-signing

ragnum

We had this at work too, there are a lot of hacks to get around the automatic system. The only true solution is to sign your code. The price of that can sadly vary a lot.

Kurague

No need to get rid of it: Mark the whole folder you work on as an exception, windows defender will ignore that folder and all its sub folders. This just requires you to go to windows defender>anti virus protection>Exceptions, and add the desired folder

nagi

If it's your own PC, you can get rid of it completely, which is unadvised. You can install any 3rd party antivirus and then shut that down. Or if it is someone else's PC, add the directory to exclusions. Defender does a lot wrong, but will respect exclusions.

Shirobine01

Tell everyone to start using Linux

Dekent

This is what I do, I set up a folder for Mtool and told windows defender to leave it alone with the exclusions, it's never bothered me that way.

SSJSonGoku-ParnOfZaxon

It's pretty simple. I do it as job. From Admin Powershell: Uninstall-WindowsFeature -Name Windows-Defender

FlyAlon3

This is the right thing to do

FreakTearz

This is the updated version and i can vouch for it. Its been installed on 3 of my personal computers. https://youtu.be/LMN17-i10Ng

Kurome

You can try an app called "Winhance" by a youtuber named Memory. It appears that it can completely disable Windows Defender (Windows 11), amongst other things. I haven't tested it myself though. https://github.com/memstechtips/Winhance https://youtu.be/1o-eO5doJrM

Jinro

You should be able to add a specific folder or directory to the "Exclusion" list in your Defender settings, might help

Michiel Hollister

Typically you can disable it and then install a third party antivirus which should override it from coming back on. Conversely you can download one of the controller apps above but with newer Windows updates it's been flagged as malicious and windows will try to not let it run.

Robin

https://github.com/pgkt04/defender-control

Tsarius

I agree, it's really annoying to have to re-download your tool updates from scratch because it got marked as a virus injector. I can't imagine how awful it would be from the dev side.