Disabling Defender

1. msconfig
2. boot
3. safe boot
4. Apply → ok, then restart
5. Open file explorer
6. Navigate to C:\ProgramData\Microsoft\
7. Look for the Windows Defender folder, right-click → properties
8. Then go to security → advanced
9. Here you’ll see the Owner listed as SYSTEM… we’re going to change that by clicking Change
10. Type in Administrators then hit OK
11. After that, delete all other users listed except the one we added
12. Make sure the Replace all child object permission entries with inheritable permission entries from this object is selected, then hit Apply
    1. You’ll see some popups and some errors but just keep clicking Continue
13. Now open regedit
14. Navigate to HKLM\SYSTEM\CurrentControlSet\Services\Sense
    1. Right-click on Start → Modify and change the value to 4
15. Now repeat Step 14 for the following:
    1. HKLM\SYSTEM\CurrentControlSet\Services\WdBoot
    2. HKLM\SYSTEM\CurrentControlSet\Services\WdFilter
    3. HKLM\SYSTEM\CurrentControlSet\Services\WdNisDrv
    4. HKLM\SYSTEM\CurrentControlSet\Services\WdNisSvc
    5. HKLM\SYSTEM\CurrentControlSet\Services\WinDefend
16. msconfig
17. Boot → uncheck Safe boot then hit Apply, OK, and restart
18. Now Defender will not have the proper permissions to run