8 ms·
I don't think there is a concept of "main executable". There may be an executable that shows a GUI for the user, but most of the antivirus is probably implement
by iqanq 5y ago
I don't think there is a concept of "main executable". There may be an executable that shows a GUI for the user, but most of the antivirus is probably implemented in the kernel, file system filter drivers, etc.
- grishka 5y agoEven then, I doubt it's statically linked into the kernel or any other core component. It still must be some kind of separate loadable module that would most probably be stored as a separate file.
- garaetjjte 5y agoMsMpEng.exe is the core component, not sure if you can just delete it. There's group policy setting for disabling it (and corresponding registry key, HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\DisableAntiSpyware), but I think it only sticks in Enterprise versions.