DefenderRemover.exe

[Tudsday]

The DefenderRemover.exe file is on the U disk. When the new system is installed, insert the U disk, and then find that the exe has been killed (deleted) by defender. It is troublesome to unlock it every time.
Is there a way to solve it?

[ionuttbara]

when this happen?
send me the engine version and definitons of defender to check it.
next time download the source code and run Script_Run.bat

[Tudsday]

DefenderRemover.exe 1.28.
Win11version 226 please *.
It is true that files will be quarantined by defender, recovery is also very troublesome, the tool is very easy to use, hope to solve this problem.

[ionuttbara]

as i said: you can download the zip version of the release page: (source code.zip). after downloading, you can unarchive and no virus! run Script2_Run.bat and press Y.
currently i am finding a new method because: definitions.

[Tudsday]

Script2_Run.bat files will also be quarantined and deleted.
Please check。

[ionuttbara]

Script2_Run.bat files will also be quarantined and deleted. Please check。
what definition version do you have?

[Tudsday]

Script2_Run.bat files will also be quarantined and deleted. Please check。what definition version do you have?
Script2_Run 1.28
win 22631

[AngusAranda]

This is not a bug.

What is happening here is that Windows Defender is quarantining the executable. BEFORE you even download it, make sure to go into your Windows Security --> click on Virus & threat protection [the shield icon] in the left panel --> & toggle off: Real-time protection.
(if you don't see labels, click on the 3 line hamburger looking icon)

While still in Virus & threat protection settings --> scroll down to Exclusions --> then click on Add or remove exclusions and add both the drive root letter as a folder, and then the specific folder where the executable will be downloaded to.

NOW you can download and run windows-defender-remover without any issues, provided you have administrator access on your currently logged in user.

I would say close this ticket.

[ionuttbara]

sorry for inactivity.

as @AngusAranda said it flags as virus.

i work to next version which it try to prevent this problems.

patience!

[AngusAranda]

Take a look over at:

https://github.com/massgravel/Microsoft-Activation-Scripts

You might be able to get around it by not taking this an executable anymore and just a script you call with irm and execute with iex via powershell.

A lot of tweaks and mods are transitioning to this method because of how "secure" Windows Defender is.

When utilizing this method, it also helps OOBE automation.

[ionuttbara]

yes and not. i'm working a powershell port, to create something like ExecTi to force remove files and registry entires. it takes time. when it will be done, it will not be flagged.