A security researcher built a program that the OS sees as an antivirus
Since two AV programs can’t run at the same time, Windows Defender turns itself off
Previous iteration was taken down for copyright infringment
Hackers can now easily turn off your Windows Defender program by registering a fake antivirus on your computer. To do that, they use a new tool called Defendnot, recently released by a security researcher with the alias es3n1n.
As they explained, Defendnot leverages a previously undocumented Windows Security Center (WSC) API, which third-party antivirus programs use to tell the operating system if they’re running on the device or not.
