feature_request(25h2): removing Windows Defender on Windows 11 25H2

[Kristinita]

1. Summary

After upgrading from Windows 22H2 with removed Windows Defender to Windows 11 25H2, I can’t fully remove Windows Defender. windows-defender-remover doesn’t kill services MpDefenderCoreService.exe, MsMpEng.exe, NisSrv.exe, and SecurityHealthService.exe.

If windows-defender-remover already can successfully kill Windows Defender on 25H2, please update the documentation.

2. Steps to reproduce

git clone https://github.com/ionuttbara/windows-defender-remover

cd windows-defender-remover

2.1. Launching Script_run.bat and DefenderRemover.exe (12.8.4)

Windows Defender prevents launching these files including if they’re launched from PowerRun.exe.

Windows Settings → Privacy & security → Windows Security → Open Windows Security → Protection history:

Trojan:BAT/DefDisable.DA!MTB:

HackTool:Win32/PowerRun!rfn:

2.2. Launching defender_remover13.ps1 (release 13.0, beta, PowerShell)

I selected Run with PowerShell in the context menu of the file defender_remover13.ps1 → Y ([Y] Remove Windows Defender Antivirus + Disable All Security Mitigations) → Enter → PC restarts after all defender_remover13.ps1 actions → Windows starts with services MpDefenderCoreService.exe, MsMpEng.exe, NisSrv.exe, and SecurityHealthService.exe.

3. Environment

Microsoft Windows 11, version 25H2 Hudson Valley 2 (OS Build 26200.7019)

Thanks.

[TheodorusLimbong]

yeah bro we have same issue

[Othmane-ElAlami]

Add the folder to the exclusions list and it should work fine.