Hacker News new | ask | show | jobs
by ChuckNorris89 1622 days ago
>Except Defender/Malware Protection...

I just checked and it can definitely kill malware protection so I don't know where you got that information but it's false.

And even without checking, being able to disable malware protection is a necessary feature in any OS, for SW development and debugging activities, so I would assume malware protection could be easily killed without a problem by the user with admin privileges.

2 comments

Not sure which version of Windows you're on but a lot of things like this have been blocked in newer versions, here is a screencap from attempting this on 11: https://i.imgur.com/xY4dNVL.png

> And even without checking, being able to disable malware protection is a necessary feature in any OS, for SW development and debugging activities, so I would assume malware protection could be easily killed without a problem by the user with admin privileges.

Lol, one would assume wouldn't they... in 11 even setting the GPs for all of the antimalware stuff to off won't stop the processes from running. You can still get it to a decently "get out of my way" level though.

I was trying this a few weeks ago on a brand new Windows 10 install

I turn off the "realtime protection" in GPO/options... it's still there

I try killing "Antimalware Service Executable" (Msmpeng.exe), in taskmanager or try disable the service in the service control panel: Access Denied

I reboot into safe mode, disable the service, reboot and it's gone

.. but reboot again and it's back

I had to DELETE the service in safe mode and change the permissions on the executable so it couldn't be accessed/modified by anything

(borderline rootkit if you ask me)