windows-defender

问题 Since past two months or so I have been observing a strange phenomenon with the Real Time Protection Service that comes bundled in as a part of Windows Defender on Windows 10. When this service is set to ON Visual Studio builds take an excruciatingly long time to complete. Visual Studio itself takes forever to launch. Further if there are managed add-ins (written using Visual Studio Tools For Office, VSTO) installed in Outlook, Outlook takes 13-14 seconds to launch! When this service is

问题 I must warn you I don't use powershell much. I am trying to turn off windows defender real time protection via powershell I found the command Set-MpPreference -DisableRealtimeMonitoring $true and tried it in admin privileges only to get this Set-MpPreference : Operation failed with the following error: 0x800106ba. Operation: Set-MpPreference. Target: DisableRealtimeMonitoring. At line:1 char:1 + Set-MpPreference -DisableRealtimeMonitoring $true + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

问题 I must warn you I don't use powershell much. I am trying to turn off windows defender real time protection via powershell I found the command Set-MpPreference -DisableRealtimeMonitoring $true and tried it in admin privileges only to get this Set-MpPreference : Operation failed with the following error: 0x800106ba. Operation: Set-MpPreference. Target: DisableRealtimeMonitoring. At line:1 char:1 + Set-MpPreference -DisableRealtimeMonitoring $true + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

问题 I like to disable Windows Defender Real Time Protection via GPO on Windows 10 Pro. When I configure GPO like this: Real-Time Protection is shown as off: However after a reboot the Protection is magically enabled again: GPO settings have not changed. I am trying to disable Real Time Protection to be able to analyze and reverse engineer malware. In addition even if Windows tells me Real Time Protection is managed by the administrator it is still enabled in the back. I really wonder if there is

问题 I like to disable Windows Defender Real Time Protection via GPO on Windows 10 Pro. When I configure GPO like this: Real-Time Protection is shown as off: However after a reboot the Protection is magically enabled again: GPO settings have not changed. I am trying to disable Real Time Protection to be able to analyze and reverse engineer malware. In addition even if Windows tells me Real Time Protection is managed by the administrator it is still enabled in the back. I really wonder if there is

问题 I am working on a windows application. After creating the installer file i.e. MSI, it gets installed and works perfectly however, once i upload it on cloud server and try downloading it from there and install it, i get the warning message saying "Microsoft Defender Smart Screen Prevented an unrecognized app from starting. Running this app might put your PC at risk" (below screen). Any help would be greatly appreciated!!! 回答1: I have linked to an answer above. Might summarize quickly: Digital

问题 I excluded the follwing folders in windows defender, but the "Antimalware Service executable" is still using a lot of cpu. C:\Program Files\Android\Android Studio C:\Users\ME\.android C:\Users\ME\MyAndroidProjects C:\Users\ME\AppData\local\Android Which folder/file did I forget? 回答1: This is now described in official documentation: Gradle cache %USERPROFILE%\.gradle Android Studio projects %USERPROFILE%\AndroidStudioProjects Android SDK %USERPROFILE%\AppData\Local\Android\SDK Android Studio

问题 I excluded the follwing folders in windows defender, but the "Antimalware Service executable" is still using a lot of cpu. C:\Program Files\Android\Android Studio C:\Users\ME\.android C:\Users\ME\MyAndroidProjects C:\Users\ME\AppData\local\Android Which folder/file did I forget? 回答1: This is now described in official documentation: Gradle cache %USERPROFILE%\.gradle Android Studio projects %USERPROFILE%\AndroidStudioProjects Android SDK %USERPROFILE%\AppData\Local\Android\SDK Android Studio

问题 I excluded the follwing folders in windows defender, but the "Antimalware Service executable" is still using a lot of cpu. C:\Program Files\Android\Android Studio C:\Users\ME\.android C:\Users\ME\MyAndroidProjects C:\Users\ME\AppData\local\Android Which folder/file did I forget? 回答1: This is now described in official documentation: Gradle cache %USERPROFILE%\.gradle Android Studio projects %USERPROFILE%\AndroidStudioProjects Android SDK %USERPROFILE%\AppData\Local\Android\SDK Android Studio

问题 I am using Windows Defender Function to scan folder. First I opened windows defender manager using MpManagerOpen. Next I started scanning using MpScanStart function. And then, I enumerated all threats using MpThreatOpen function. My goal is how to remove these threats using Windows Defender Function. At MSDN there is no threat remove function. After googling i found MpCleanStart function but i don't know how to use. Please help me. Thank you for you help. This is my code. MPHANDLE w_handle =