Location:
State:
Carrier
Country
Status

Q: re Windows Defendermpcmdrun.exe


Hello Ten,
I run third party AV. So, Windows Defender is off and Windows Defender Service is Manual -- not running.
I'm wondering why I see > C:Program FilesWindows Defendermpcmdrun.exe called.
I found > MpCmdRun.exe running, but I use a different antivirus, why? - Anti-Virus, Anti-Malware, and Privacy Software
and I found > It's the Windows Defender Command Line Utility.
Wondering, why does > Windows Defendermpcmdrun.exe want to run. I've blocked thru blacklist.
Curious, why the heck is mpcmdrun so persistent with Windows Defender not running.


Thanks

Um, is my Topic under moderation review.

Most likely it's due to a scheduled task. Check your task scheduler (Windows>Windows Defender).

Most likely it's due to a scheduled task. Check your task scheduler (Windows>Windows Defender).
No scheduled task for Windows Defender. And I have C:Program FilesWindows Defendermpcmdrun.exe blacklisted. I see stuff like dstokenclean, compattelrunner, dmclient and mpcmdrun called in my anti-executable event log. NoVirusThanks EXE Radar Pro is great fun. And at least one Bleeping member wanted to know too. Thanks

No scheduled task for Windows Defender.
By default, there are 4, unless you have Insider version. Also make sure to disable all its services (Wdfilter particulary).


  • schtasks /Change /TN "MicrosoftWindowsWindows DefenderWindows Defender Cache Maintenance" /Disable
  • schtasks /Change /TN "MicrosoftWindowsWindows DefenderWindows Defender Cleanup" /Disable
  • schtasks /Change /TN "MicrosoftWindowsWindows DefenderWindows Defender Scheduled Scan" /Disable
  • schtasks /Change /TN "MicrosoftWindowsWindows DefenderWindows Defender Verification" /Disable

    reg add "HKLMSystemCurrentControlSetServicesSense" /v "Start" /t REG_DWORD /d "4" /f (this one is in Insider)
    reg add "HKLMSystemCurrentControlSetServicesWdFilter" /v "Start" /t REG_DWORD /d "4" /f
    reg add "HKLMSystemCurrentControlSetServicesWdNisSvc" /v "Start" /t REG_DWORD /d "4" /f
    reg add "HKLMSystemCurrentControlSetServicesWinDefend" /v "Start" /t REG_DWORD /d "4" /f

W10 Home v1511 (Build 10586,494)

Um, is my Topic under moderation review.
What made you think that?

Q: re Windows Defendermpcmdrun.exe