The program uses the irregular API Windows Security Center to save an imaginary antivirus, and then Windows Defender’s automatically disconnected.
Defendnot does not require the substitution of system files or the installation of real antivirus. The vehicle works with the creation of DLL Bibliotexes, which is presented to reliable processes such as “distributor of tasks”. This allows you to record an imaginary antivirus with an arbitrary name.
Microsoft began to classify Defendnot as a Trojan horse and prevent it from working with built machine learning algorithms.
Source: Ferra

I am a professional journalist and content creator with extensive experience writing for news websites. I currently work as an author at Gadget Onus, where I specialize in covering hot news topics. My written pieces have been published on some of the biggest media outlets around the world, including The Guardian and BBC News.