{"id":3220,"date":"2025-05-27T03:23:49","date_gmt":"2025-05-27T10:23:49","guid":{"rendered":"https:\/\/www.ssls.com\/blog\/?p=3220"},"modified":"2025-05-27T03:23:50","modified_gmt":"2025-05-27T10:23:50","slug":"defendnot-can-trick-windows-into-disabling-built-in-antivirus-software","status":"publish","type":"post","link":"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/","title":{"rendered":"Defendnot can trick Windows into disabling built-in antivirus&nbsp;software"},"content":{"rendered":"\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_Printer-company.png\" alt=\"\" class=\"wp-image-3143\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">If for some reason, you ever wanted to use your Windows computer without any antivirus software (which is highly <em>not<\/em> recommended for the majority of people), there\u2019s a new tool for that. A researcher known as <a href=\"https:\/\/blog.es3n1n.eu\/posts\/how-i-ruined-my-vacation\/\">es3n1n<\/a> has created Defendnot, a tool that tricks Microsoft Defender into believing another antivirus product has been installed, so that it no longer runs.<\/p>\n\n\n\n<!--more-->\n\n\n\n<h2 class=\"wp-block-heading\">How it works<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Right now, Windows Defender is set up to run automatically if no other antivirus program is installed on a Windows machine. Even if you turn it off, it will turn on the next time you restart your computer. The only way to disable Windows Defender is if another antivirus program is installed. In that case, Windows Defender is automatically disabled to avoid any conflicts.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Defendnot tricks Windows into believing another antivirus program is registered by using an undocumented Windows Security Center (WSC) API, bypassing all validation checks. It does this by injecting its DLL into Taskmgr.exe, a system process signed and trusted by Microsoft. Then it registers the fake antivirus along with a display name.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The predecessor to Defendnot is a project called no-defender, which used code from another antivirus product to trick Windows. The antivirus vendors filed a DMCA takedown, and the tool was eventually pulled from GitHub. Es3n1n explained their reasoning:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;Then, after a few weeks after the release, the project blew up quite a bit and gained ~1.5k stars, after that the developers of the antivirus I was using filed a DMCA takedown request and I didn&#8217;t really want to do anything with that so just erased everything and called it a day,&#8221; the developer explains in a blog post.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What now<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">While it may seem like a baffling undertaking for those of us who like our computers to be continually protected, this research could help develop future security tools, since the project demonstrates how one can bypass security features of trusted systems.&nbsp;<br>Meanwhile, Windows Defender has already begun to be aware of the tool and has started <a href=\"https:\/\/www.tomshardware.com\/software\/security-software\/defendnot-tool-pitched-as-an-even-funnier-way-to-disable-windows-defender\">flagging downloads<\/a> of the Defendnot tool, quarantining it as a Trojan.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>If for some reason, you ever wanted to use your Windows computer without any antivirus software (which is highly not recommended for the majority of people), there\u2019s a new tool for that. A researcher known as es3n1n has created Defendnot, a tool that tricks Microsoft Defender into believing another antivirus product has been installed, so [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3220","post","type-post","status-publish","format-standard","hentry","category-news"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Defendnot can trick Windows into disabling built-in antivirus software | SSLs.com Blog<\/title>\n<meta name=\"description\" content=\"If for some reason, you ever wanted to use your Windows computer without any antivirus software (which is highly not recommended for the majority of\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Defendnot can trick Windows into disabling built-in antivirus software | SSLs.com Blog\" \/>\n<meta property=\"og:description\" content=\"If for some reason, you ever wanted to use your Windows computer without any antivirus software (which is highly not recommended for the majority of\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/\" \/>\n<meta property=\"og:site_name\" content=\"SSLs.com Blog\" \/>\n<meta property=\"article:published_time\" content=\"2025-05-27T10:23:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-05-27T10:23:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_Printer-company.png\" \/>\n<meta name=\"author\" content=\"Cora Quigley\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cora Quigley\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\\\/\"},\"author\":{\"name\":\"Cora Quigley\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#\\\/schema\\\/person\\\/ae7158292578f80604c428cc5bbe68c0\"},\"headline\":\"Defendnot can trick Windows into disabling built-in antivirus&nbsp;software\",\"datePublished\":\"2025-05-27T10:23:49+00:00\",\"dateModified\":\"2025-05-27T10:23:50+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\\\/\"},\"wordCount\":362,\"image\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_Printer-company.png\",\"articleSection\":[\"news\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\\\/\",\"url\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\\\/\",\"name\":\"Defendnot can trick Windows into disabling built-in antivirus software | SSLs.com Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_Printer-company.png\",\"datePublished\":\"2025-05-27T10:23:49+00:00\",\"dateModified\":\"2025-05-27T10:23:50+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#\\\/schema\\\/person\\\/ae7158292578f80604c428cc5bbe68c0\"},\"description\":\"If for some reason, you ever wanted to use your Windows computer without any antivirus software (which is highly not recommended for the majority of\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.ssls.com\\\/blog\\\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\\\/#primaryimage\",\"url\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_Printer-company.png\",\"contentUrl\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_Printer-company.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Defendnot can trick Windows into disabling built-in antivirus&nbsp;software\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/\",\"name\":\"SSLs.com Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#\\\/schema\\\/person\\\/ae7158292578f80604c428cc5bbe68c0\",\"name\":\"Cora Quigley\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g\",\"caption\":\"Cora Quigley\"},\"description\":\"Cora is a digital copywriter for SSLs.com. Having eight years of experience in online content creation, she is a versatile writer with an interest in a wide variety of topics, ranging from technology to marketing.\",\"sameAs\":[\"https:\\\/\\\/www.ssls.com\\\/\"],\"url\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/author\\\/cora-quigley\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Defendnot can trick Windows into disabling built-in antivirus software | SSLs.com Blog","description":"If for some reason, you ever wanted to use your Windows computer without any antivirus software (which is highly not recommended for the majority of","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/","og_locale":"en_US","og_type":"article","og_title":"Defendnot can trick Windows into disabling built-in antivirus software | SSLs.com Blog","og_description":"If for some reason, you ever wanted to use your Windows computer without any antivirus software (which is highly not recommended for the majority of","og_url":"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/","og_site_name":"SSLs.com Blog","article_published_time":"2025-05-27T10:23:49+00:00","article_modified_time":"2025-05-27T10:23:50+00:00","og_image":[{"url":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_Printer-company.png","type":"","width":"","height":""}],"author":"Cora Quigley","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Cora Quigley","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/#article","isPartOf":{"@id":"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/"},"author":{"name":"Cora Quigley","@id":"https:\/\/www.ssls.com\/blog\/#\/schema\/person\/ae7158292578f80604c428cc5bbe68c0"},"headline":"Defendnot can trick Windows into disabling built-in antivirus&nbsp;software","datePublished":"2025-05-27T10:23:49+00:00","dateModified":"2025-05-27T10:23:50+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/"},"wordCount":362,"image":{"@id":"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_Printer-company.png","articleSection":["news"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/","url":"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/","name":"Defendnot can trick Windows into disabling built-in antivirus software | SSLs.com Blog","isPartOf":{"@id":"https:\/\/www.ssls.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/#primaryimage"},"image":{"@id":"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_Printer-company.png","datePublished":"2025-05-27T10:23:49+00:00","dateModified":"2025-05-27T10:23:50+00:00","author":{"@id":"https:\/\/www.ssls.com\/blog\/#\/schema\/person\/ae7158292578f80604c428cc5bbe68c0"},"description":"If for some reason, you ever wanted to use your Windows computer without any antivirus software (which is highly not recommended for the majority of","breadcrumb":{"@id":"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/#primaryimage","url":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_Printer-company.png","contentUrl":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_Printer-company.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.ssls.com\/blog\/defendnot-can-trick-windows-into-disabling-built-in-antivirus-software\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ssls.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Defendnot can trick Windows into disabling built-in antivirus&nbsp;software"}]},{"@type":"WebSite","@id":"https:\/\/www.ssls.com\/blog\/#website","url":"https:\/\/www.ssls.com\/blog\/","name":"SSLs.com Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ssls.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.ssls.com\/blog\/#\/schema\/person\/ae7158292578f80604c428cc5bbe68c0","name":"Cora Quigley","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g","caption":"Cora Quigley"},"description":"Cora is a digital copywriter for SSLs.com. Having eight years of experience in online content creation, she is a versatile writer with an interest in a wide variety of topics, ranging from technology to marketing.","sameAs":["https:\/\/www.ssls.com\/"],"url":"https:\/\/www.ssls.com\/blog\/author\/cora-quigley\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts\/3220","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/comments?post=3220"}],"version-history":[{"count":1,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts\/3220\/revisions"}],"predecessor-version":[{"id":3221,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts\/3220\/revisions\/3221"}],"wp:attachment":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/media?parent=3220"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/categories?post=3220"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/tags?post=3220"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}