WinReducer EX-100 - v2.3.7.0 & Windows 10 v 2004

Hi Winterstorm

Aldough  i removed or disabled all items below Windows Defender  blocked  Spotify  when  i logged in
So Windows Defender is still present in Windows 10 v 2004, i did not test i t with Windows 10 v 1909 

 Features Windows Defender Application Guard
 Control Panel Windows Defender
 Modern UI Apps Windows Defender
 Settings Update and Security Windows Defender
 Tweaks Modern UI Apps Defender Disable Cloud Based Protection
 Tweaks Modern UI Apps Defender Disable Online Samples Submission
 Tweaks Modern UI Apps Defender Disable Real-Time Protection
 Tweaks Modern UI Apps Defender Disable Tamper Protection
 Tweaks Modern UI Apps Defender Hide the account protection area
 Services Windows Defender Service           
 Services Windows Defender Security Center Service           
 Services Windows Defender System Guard Service  

Everything  exept EXPERT - ''Net Framework'' Complete Cleanup cleaned

So is his a bug or not a bug ??


icy

Windows Defender  Firewall blocked Qbittorrent & Utorrent after rebooting
Bug ??


icy

icy i had the same problem. even if you remove the above components windows defender service remains in services. Check it by running services.msc
and look for windows defender service. if this is the case you must run regedit and follow the path
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpssvc
you must delete mpssvc key to completely remove windows defender service. its a bit tricky because in mpssvc there are a lot
of subkeys that are locked. you must manually change the owner of  every subkey, set it to everyone and then give full control to everyone. then you try to delete
the key. if you cant you repeat the ownership change. the above takes me about 5 minutes but finally you will delete mpssvc completely and windows defender service
will be gone after a reboot.

Hi Victor

Thank You for the info Victor

Below is the registry entry

REGEDIT4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpssvc]
"DependOnService"=hex(7):6d,70,73,64,72,76,00,62,66,65,00,00
"Description"="@%SystemRoot%\\system32\\FirewallAPI.dll,-23091"
"DisplayName"="@%SystemRoot%\\system32\\FirewallAPI.dll,-23090"
"ErrorControl"=dword:00000001
"FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\
  00,02,00,00,00,60,ea,00,00,02,00,00,00,60,ea,00,00,02,00,00,00,60,ea,00,00
"Group"="NetworkProvider"
"ImagePath"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,6d,33,\
  32,5c,73,76,63,68,6f,73,74,2e,65,78,65,20,2d,6b,20,4c,6f,63,61,6c,53,65,72,\
  76,69,63,65,4e,6f,4e,65,74,77,6f,72,6b,46,69,72,65,77,61,6c,6c,20,2d,70,00
"ObjectName"="NT Authority\\LocalService"
"RequiredPrivileges"=hex(7):53,65,41,73,73,69,67,6e,50,72,69,6d,61,72,79,54,6f,\
  6b,65,6e,50,72,69,76,69,6c,65,67,65,00,53,65,41,75,64,69,74,50,72,69,76,69,\
  6c,65,67,65,00,53,65,43,68,61,6e,67,65,4e,6f,74,69,66,79,50,72,69,76,69,6c,\
  65,67,65,00,53,65,43,72,65,61,74,65,47,6c,6f,62,61,6c,50,72,69,76,69,6c,65,\
  67,65,00,53,65,49,6d,70,65,72,73,6f,6e,61,74,65,50,72,69,76,69,6c,65,67,65,\
  00,53,65,49,6e,63,72,65,61,73,65,51,75,6f,74,61,50,72,69,76,69,6c,65,67,65,\
  00,00
"ServiceSidType"=dword:00000003
"Start"=dword:00000002
"SvcHostSplitDisable"=dword:00000001
"SvcMemHardLimitInMB"=dword:0000001b
"SvcMemMidLimitInMB"=dword:00000014
"SvcMemSoftLimitInMB"=dword:0000000c
"Type"=dword:00000020

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpssvc\Parameters]
"ServiceDll"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,6d,\
  33,32,5c,6d,70,73,73,76,63,2e,64,6c,6c,00
"ServiceDllUnloadOnStop"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpssvc\Parameters\ACService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpssvc\Parameters\PortKeywords]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpssvc\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
  00,1c,00,01,00,00,00,02,80,14,00,ff,00,0f,00,01,01,00,00,00,00,00,01,00,00,\
  00,00,02,00,60,00,04,00,00,00,00,00,14,00,85,00,02,00,01,01,00,00,00,00,00,\
  05,0b,00,00,00,00,00,14,00,9f,00,0e,00,01,01,00,00,00,00,00,05,12,00,00,00,\
  00,00,18,00,9d,00,0e,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,\
  00,18,00,85,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,21,02,00,00,01,01,\
  00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

I simply deleted it with registrar  with elevated rights and it seems to be gone
i will see now for a while if everything is ok

thank You Victor

Ok. Post your results when you are done. One question. What is registrar;

Hi Victor
Registrar is a registry editor that function as a REGEDIT4 editor
It allows you to delete anything under elevated rights ,
so be careful when using it that way as it can break completedly your windows


Mictrosoft registry editor and other editors using 
"Windows Registry Editor Version 5.00"

provide false information


With Mictrosoft registry editor a lot of things can not
be deleted or modified, with Registrar no probleme at all


icy

icy

I wanted to find a good registry program but i never bothered to search.
Good tool. Thanks icy.

Hi Victor
Startup computer seems to be slower when removing  that registry
icy

I tested it my friend both in my laptop and desktop and the difference is meaningless (less than 0.5 second from cold boot to desktop)
and well inside the error margin.

Hi Victor

Thank You For Your Testing & Confirmation

icy

Icy contacted me that he got no problems and all his thread can be closed.

@Icy if you experience the same problem just open a new thread. Thanks