How to disable Windows Defender in Windows 10 1909

[c2DDragon]

Let's be fair, it's not easy. But it is much better than it once was.

I gave up with it since Windows 8 but kudos to you for trying

 

[lexluthermiester]

I gave up with it since Windows 8 but kudos to you for trying

Oh I feel you, as a rule I don't and will not use it. However, I enjoy a good challenge and was curious what the result would be. GRC.com has been an excellent place to learn about security issues and hardware in general. So when I saw that post, I wanted to test.

 

[DeathtoGnomes]

It is not my law. It is just the facts. If you disagree, then show us the facts! Show us the evidence! Show us where all these WF users are being compromise because they use WF. Show us where all these WF compromised WF computers are phoning home because WF isn't blocking the malicious code that some how got on these machines.

Show us where I am wrong. I already admitted once I made a mistake. I'm man enough to admit it again. Just show us!

Pointing out a flaw or a potential problem does not mean "all these WF computers were compromised" nor was malicious code brought up, so please stop exaggerating with that "the sky is falling" crap.

The phoning home as you call it, is now called telemetry data, which cannot be blocked in WF easily, and I reiterate that a 3rd party firewall is better in that sense.

 

[Bill_Bright]

so please stop exaggerating with that "the sky is falling" crap.

Look around (and in the mirror!)! I'm NOT the one claiming "the sky is falling". I was NOT the one claiming Windows Firewall is "very bad" and the "the worst firewall". I never called people who found it easy to manage, "nuts". I never claimed it had a "steep learning curve". I never claimed Microsoft cannot be trusted then implied Windows Firewall can't either. I never implied Windows Firewall was so complicated one had to be "trained in security". I never implied only Window Firewall computers can be compromised and drafted into botnets or become Zombie computers.

All FUD!

And yes, malicious code was brought up several times with claims it could easily gain outgoing access, totally ignoring the fact it some how managed to sneak by all our security coming in undetected, and some how managed to run on the system without being detected by the real-time malware scanners.

You guys has spent 5 pages of posts spewing FUD and declaring how bad and unsafe Windows Firewall is but have failed to provide any evidence whatsoever that Windows Firewall users are being compromised at greater rates, or that they stopped getting compromised just by installing an aftermarket firewall.

So, Chicken Little, look in the mirror. Your tinfoil hat has a hole in it. The sky is NOT falling. Windows Firewall is indeed capable of protecting Windows users - and has been doing so for years. Contrary to what some in this thread want everyone to believe, the sky is NOT falling and almost nobody "needs" anything more advanced.

But, if you just want more control, Microsoft has made it easy to install a 3rd party firewall and then Windows Firewall will gracefully step out of the way. For those users, I would suggest GlassWire. It is so easy, even Henny Penny can use it.

 

[DeathtoGnomes]

sigh, again Billy you take it to the extremes with your diatribes all too often blowing conversations out of proportion and always claiming m$ is perfect that can do no wrong. I will never claim windows firewall and defender is a total failure, flawed yes.

But, if you just want more control, Microsoft has made it easy to install a 3rd party firewall

glad you see this our way finally.

 

[Bill_Bright]

and always claiming m$ is perfect that can do no wrong.

And there you go, Henny, telling falsehoods again, instead of providing any evidence to support your constant FUD.

I never said MS or WF was perfect. I even admitted and apologized for being wrong about it's outbound defaults.

glad you see this our way finally.

My point never was about control, but sadly you don't seem to understand what that means. Just like you don't seem to understand the "the sky is falling" suggests impending doom, and how MS telemetry has nothing to do with malware. So again, this is just more of your FUD and spewing misinformation. Apparently, when you are incapable of defending your position with facts, or the truth, so you lash out with falsehoods and inaccurate personal accusations. I feel sorry for you.

When you and your fellow biased MS haters can show us where WF is causing all these system compromises your FUD implies, or where switching to a 3rd party prevents them, I will pay attention. In the meantime, I will give your FUD comments all the attention they deserve.

Frankly, I think this thread should be closed.

 

[Kursah]

Regardless, that is all beyond the scope of this thread. I'm moving on.

Why did you even say this? Please don't answer that, I'm asking so you can have food for thought.

Frankly, I think this thread should be closed.

No thanks, we'd rather not if we don't have to. We'd rather members be constructive, without drama and BS, and surely without degrading a topic to the point it needs closed (talking to more than just you Bill).


To all of you, keep this topic constructive or move along. To those of you involved in degrading this topic, stay tuned...

 

[DeathtoGnomes]

My point never was about control,

And thats where we differ, my point is about control, 3rd party software gives that extra bit of control so you dont have to deal with WF or WinDefender, not because its better but because its easier to learn to some people. So if someone thinks disabling WD needs doing for some other software to perform better, its on them if something goes wrong.

IMO, any telemetry is malware related, its the same thing as tracking cookies but with a different name. I am biased but I dont hate m$, if you cant understand that, thats your problem stop being a ****** about it. Henry out ( @Kursah really this time!) .

 

[R-T-B]

it. It shouldn't even go out without your persmission. It should be blocked by default, that's the purpose of a firewall.

Blocked outgoing by default would mean you are basically offline by default...

 

[lexluthermiester]

Blocked outgoing by default would mean you are basically offline by default...

Not really. It's a way of making sure that only the traffic you select is making it out of your system. If traffic is blocked by default the user can pick and choose which programs may connect to a network/internet. A good firewall will let you selectively regulate the OS itself without disrupting the network connection. This is part of the methodology that I use.

 

[biffzinker]

Let's be fair, it's not easy. But it is much better than it once was.

There's always a third party GUI option to make it easier.

There's this from Malwarebytes:

BiniSoft.org

Windows Firewall Control is a powerful tool which extends the functionality of Windows Firewall by adding outbound notifications and many other features.

www.binisoft.org

 

[R-T-B]

Not really.

Functionally in it's default state I mean. Of course it isn't that from a security perspective, but my point is it'd confuse the heck out of a novice user.

 

[lexluthermiester]

There's always a third party GUI option to make it easier.

There's this from Malwarebytes:

There is that. I haven't tested it yet. I have tested TinyWall and it is a great way for people to both control the Windows Firewall, but also learn how it works as they use it;

Download TinyWall - MajorGeeks

TinyWall is a free program to harden and control the advanced firewall built into Windows 7 and above. Using the advanced Windows Firewall built into newer Windows versions, TinyWall´s performance impact is negligible.

www.majorgeeks.com

Download TinyWall

Download TinyWall 3.3.1 - A non-intrusive firewall software solution that was designed to provide some extra security and process monitoring capabilities, especially for home users

www.softpedia.com

Evorim is also one that I've tested and promote. Well configured it is very solid;

Download Evorim Free Firewall - MajorGeeks

Free Firewall provides you with all the tools needed to protect against threats from the internet and more. Use your machine with confidence, knowing that you will be notified if any of your apps attempt to access the internet. You have the option to switch modes from Credulous, which allows...

www.majorgeeks.com

Download Free Firewall

Download Free Firewall 2.6.2 - Protects your computer against all kinds of threats, preventing suspicious applications from accessing the Internet and sending data back home

www.softpedia.com

I personally prefer Comodo's Firewall as it has much more fine-grained controls;

Comodo Forum

Comodo community forum to discuss and help people using security products

forums.comodo.com

This is the link for the forum page of CIS. It provides for the offline installer version. CIS will install in 30-day premium trial mode, but after 30days will revert to the free version.

 

[moproblems99]

Well configured it is very solid;

Basically describes any firewall. The problem is the configuration part. Firewalls are very simplistic in what they do.

 

[lexluthermiester]

Basically describes any firewall. The problem is the configuration part. Firewalls are very simplistic in what they do.

Oh good grief no. Some firewalls are garbage and no configuration can make them good. McAfee, Panda, BullGuard, ESET and ZoneAlarm are almost useless and should be avoided. BitDefender is another firewall that should be avoided but at least does something, poorly. AVG currently has a firewall that is on PAR with the Windows Firewall, but is easier to use. However, it doesn't allow some fine-grained controls on a per instance basis.

 

[Ahhzz]

Oh good grief no. Some firewalls are garbage and no configuration can make them good. McAfee, Panda, BullGuard, ESET and ZoneAlarm are almost useless and should be avoided. BitDefender is another firewall that should be avoided but at least does something, poorly. AVG currently has a firewall that is on PAR with the Windows Firewall, but is easier to use. However, it doesn't allow some fine-grained controls on a per instance basis.

Zone Alarm used to be good, and I also used to use Black Ice, but it's long defunct. I'm running with TinyWall right now. Stops everything until you make a rule allowing it...

 

[Solaris17]

Black Ice

Black Ice Defender man those were the days

 

[lexluthermiester]

I also used to use Black Ice, but it's long defunct.

Oh yeah. That was 11 years ago.

 

[moproblems99]

Oh good grief no. Some firewalls are garbage and no configuration can make them good. McAfee, Panda, BullGuard, ESET and ZoneAlarm are almost useless and should be avoided. BitDefender is another firewall that should be avoided but at least does something, poorly. AVG currently has a firewall that is on PAR with the Windows Firewall, but is easier to use. However, it doesn't allow some fine-grained controls on a per instance basis.

Then I would argue that the firewall is not well configured at its core (IE not user configuration).

 

[lexluthermiester]

Then I would argue that the firewall is not well configured at its core (IE not user configuration).

That would be poor coding, not poor configuration.

 

[moproblems99]

That would be poor coding, not poor configuration.

Perhaps, perhaps not.

Edit: They likely piggy backed off a third party library. Code monkeys are lazy.

 

[lexluthermiester]

Perhaps, perhaps not.

There is a distinct difference between the two.

Edit: They likely piggy backed off a third party library. Code monkeys are lazy.

All of them? Very unlikely..

 

[moproblems99]

There is a distinct difference between the two.

All of them? Very unlikely..

People don't like to reinvent the wheel so, yes, I bet they are all using libraries and didn't implement, or configure, them well. I mean IME runs off minix, surely someone as big as Intel could have written everything on their own for IME. Now think of much smaller software companies trying to make a buck.

 

[matthewmatics]

All I can see in those words ^^ are "tweakers banging". LOL.

 

[Octopuss]

I don't mind defender, mostly because I don't want to pay for standalone AV again (mostly because you have to pay a subscription), but at the same time I hate how relatively unconfigurable it is.