Need to remove windefend and updates from win 8

Losetheupdates

New Member
Thread author
Feb 4, 2015
9
Ok, like the title says, I need to remove the following keys from my computer.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend\Security]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\TriggerInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\TriggerInfo\1]

I understand the you should not do this yada yada. I never update windows and never have any issues the issues only start when updates start, I usually delete these keys or similiar on win 7 or lower versions. This windows 8 is giving me grief when I try and delete. I have just gotten this new windows 8 machine and want to keep it running like new. Just like my other machines which have updates turned off and I am running the same install for 4 years cause I never update. (without and virus issues) just do not click on crap and stay away from shady sites.

Also with windows 8 I want to get rid of the customer experience improvement program driver service and registry key as well as the service drivers reg key for smart screen.

he7wowo.png


I can follow any direction that you give me, and when these task are completed a 10 dollar donation for your time will be made. Thanks.
 

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Hello,


Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.



Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

Attachments

  • fixlist.txt
    73 bytes · Views: 44

Losetheupdates

New Member
Thread author
Feb 4, 2015
9
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 04-02-2015 01
Ran by vitto at 2015-02-05 01:43:29 Run:4
Running from C:\Users\vitto\Desktop
Loaded Profiles: vitto (Available profiles: vitto)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
closeprocesses:
cmd: net stop WinDefend
cmd: net stop wuauserv
Reboot:
*****************

Processes closed successfully.

========= net stop WinDefend =========

System error 5 has occurred.

Access is denied.


========= End of CMD: =========


========= net stop wuauserv =========

The service name is invalid.

More help is available by typing NET HELPMSG 2185.


========= End of CMD: =========



The system needed a reboot.

==== End of Fixlog 01:43:30 ====
 

Losetheupdates

New Member
Thread author
Feb 4, 2015
9
Update I was able to delete the update key with otl. I now need to remove windefend and the customer experience and smart screen.
 

Losetheupdates

New Member
Thread author
Feb 4, 2015
9
From the site...........
Unfortunately, Windows Defender is completely built into Windows, and you’re not going to actually uninstall it.

Surely there is a way, I have disabled it already and pertly uninstalled it. I suppose I will need to delete it via linux How about the other items can you help?
 

Losetheupdates

New Member
Thread author
Feb 4, 2015
9
I guess what I am asking is can you help me id what I need to delete concerning the smart screen and customer experience programs


ie the services.
 

Losetheupdates

New Member
Thread author
Feb 4, 2015
9
Nope. Fss Scan After running tool as Admin.

Farbar Service Scanner Version: 17-01-2015
Ran by vitto (administrator) on 05-02-2015 at 03:11:22
Running from "C:\Users\vitto\Desktop"
Microsoft Windows 8.1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Policy:
========================


Action Center:
============


Windows Update:
============
wuauserv Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open wuauserv registry key. The service key does not exist.
Checking ImagePath: ATTENTION!=====> Unable to open wuauserv registry key. The service key does not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open wuauserv registry key. The service key does not exist.

BITS Service is not running. Checking service configuration:
The start type of BITS service is set to Disabled. The default start type is Auto.
The ImagePath of BITS service is OK.
The ServiceDll of BITS service is OK.


Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============

Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MsMpEng.exe => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****
 

Losetheupdates

New Member
Thread author
Feb 4, 2015
9
No need I was just trying to see if this can be done through windows. :probably not.... I will just use linux Thanks for time,.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top