Preventing the Microsoft Antimalware Service to start automatically

[balubeto]

Hi

From the Command Prompt, what would be the proper procedure to prevent the Microsoft Antimalware Service (the latest version) to start automatically during startup of Windows 7 SP1?

Thanks

Bye

 

[ThrashZone]

Hi and welcome to SevenForums,
Do you have MSE Microsoft security essentials installed ?
Or is this related to windows defender ?
Which security suite do you use ?
Filling in your system spec's page would help :/
Cheers.

 

[balubeto]

Hi and welcome to SevenForums,
Do you have MSE Microsoft security essentials installed ?
Or is this related to windows defender ?
Which security suite do you use ?
Filling in your system spec's page would help :/
Cheers.

I turned off Windows Defender and Windows Firewall and I have no antivirus installed.

I installed the latest version of MSE but I would like to start it manually. So, how do I do this?

Thanks

Bye

 

[Jacee]

Why do you want to start it manually?

 

[balubeto]

Why do you want to start it manually?

Because I do not want any antivirus from starting automatically.

So, how do I do this?

Thanks

Bye

 

[balubeto]

Hi

How do I disable the latest version of Microsoft Security Essentials on startup of Windows 7 SP1?

Thanks

Bye

 

[balubeto]

To try to disable MSE when Windows starts, I created this bat file:

@echo off
taskkill /im msseces.exe /f /t
taskkill /im MsMpEng.exe /f /t
net stop MsMpSvc
sc config "MsMpSvc" start= disabled

Next, I created a scheduled task

<?xml version="1.0" encoding="UTF-16"?>
<Task version="1.3" xmlns="[URL]http://schemas.microsoft.com/windows/2004/02/mit/task[/URL]">
  <RegistrationInfo>
    <Date>2014-10-26T11:08:46.4219135</Date>
    <Author>Pippo\Balubeto</Author>
  </RegistrationInfo>
  <Triggers>
    <BootTrigger>
      <Enabled>true</Enabled>
    </BootTrigger>
  </Triggers>
  <Principals>
    <Principal id="Author">
      <UserId>S-1-5-18</UserId>
      <RunLevel>HighestAvailable</RunLevel>
    </Principal>
  </Principals>
  <Settings>
    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
    <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries>
    <AllowHardTerminate>true</AllowHardTerminate>
    <StartWhenAvailable>false</StartWhenAvailable>
    <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
    <IdleSettings>
      <StopOnIdleEnd>true</StopOnIdleEnd>
      <RestartOnIdle>false</RestartOnIdle>
    </IdleSettings>
    <AllowStartOnDemand>true</AllowStartOnDemand>
    <Enabled>true</Enabled>
    <Hidden>false</Hidden>
    <RunOnlyIfIdle>false</RunOnlyIfIdle>
    <DisallowStartOnRemoteAppSession>false</DisallowStartOnRemoteAppSession>
    <UseUnifiedSchedulingEngine>false</UseUnifiedSchedulingEngine>
    <WakeToRun>false</WakeToRun>
    <ExecutionTimeLimit>P3D</ExecutionTimeLimit>
    <Priority>7</Priority>
  </Settings>
  <Actions Context="Author">
    <Exec>
      <Command>D:\Users\Public\Documents\balubeto\MSE_disabled.bat</Command>
    </Exec>
  </Actions>
</Task>

so that it goes running with the System's rights when the system starts up.

When, however, I rebooted the system, the MSE service is still active. How come?

Where did I do wrong?

Thanks

Bye

 

[Alejandro85]

You may try disabling the real-time scanning if you really want to disable it from startup and re-enabling it when you want it to run, but disabling again before shutdown.

You can't simply disable the antivirus killing its processes because antiviruses use a kernel-mode driver, which Windows don't provides an interface for disabling (you can do it with third party software however). This driver is also responsible for preventing you from killing its user-mode processes as you want.

What I don't really get is the reason for doing all this.

 

[marsmimar]

Same here. I don't understand why you wouldn't want your AV to run at boot. You're leaving your computer completely open to malware. IMHO

 

[Layback Bear]

I keep checking in on this thread and I'm still wondering why one would want to do such a thing.
Just a guess but it might be interfering with a torrent program.

 

[Alejandro85]

Just a guess but it might be interfering with a torrent program.

But nobody mentioned any torrent program (or anything else for the matter).
Ane even if that were the case, adding an exception is a better choice if it's concluded that it'´s a false positive.

 

[balubeto]

You may try disabling the real-time scanning if you really want to disable it from startup and re-enabling it when you want it to run, but disabling again before shutdown.

You can't simply disable the antivirus killing its processes because antiviruses use a kernel-mode driver, which Windows don't provides an interface for disabling (you can do it with third party software however). This driver is also responsible for preventing you from killing its user-mode processes as you want.

What I don't really get is the reason for doing all this.

Of course, I had already disabled the real-time protection of MSE but I can not avoid that MSE is started with the start of Windows.

So, how do I do this?

Thanks

Bye

 

[balubeto]

Disabling the latest version of Microsoft Security Essentials

Hi

From the Command Prompt of Windows 7 SP1, is there a way to disable the real-time protection of Microsoft Security Essentials?

Thanks

Bye

 

[andrew129260]

Please re-read, and stop asking the same question. I have bolded the most important point for you.

You may try disabling the real-time scanning if you really want to disable it from startup and re-enabling it when you want it to run, but disabling again before shutdown.

You can't simply disable the antivirus killing its processes because antiviruses use a kernel-mode driver, which Windows don't provides an interface for disabling (you can do it with third party software however). This driver is also responsible for preventing you from killing its user-mode processes as you want.

What I don't really get is the reason for doing all this.

There is no reason for any of this to be done anyhow.

 

[ThrashZone]

Hi,
Yea uninstall it :/
MSE is listed just like any other program you install
Cheers.

This seems like a odd reply without the original question