Automatic Sample Submission is a feature in Microsoft Defender (previously known as Windows Defender) that allows the antivirus software to automatically send samples of suspicious files to Microsoft for analysis. This helps to improve the overall effectiveness of the antivirus software by allowing Microsoft to identify and respond to emerging threats more quickly.
When a suspicious file is detected by Microsoft Defender, the software may automatically send a copy of the file to Microsoft for analysis. The sample is analyzed by Microsoft's threat intelligence experts and used to improve the overall detection capabilities of Microsoft Defender.
It's important to note that Microsoft takes privacy seriously, and the data sent to Microsoft for analysis is used solely for the purpose of improving the effectiveness of the antivirus software. Users have the option to turn off automatic sample submission if they prefer not to send samples to Microsoft.
Stop Automatic Sample Submission by Microsoft Defender
There are 3 different methods to stop automatic sample submission by Microsoft defender:
Using Windows Security App
Using Registry Editor
Using Local Group Policy Editor
Method 1: Using Windows Security App
To stop automatic sample submission by Microsoft Defender, you can follow these steps:
STEP 1: Open the Start menu and type "Windows Security" to open the Windows Security app.
STEP 2: Click on the "Virus & threat protection" icon in the left-hand menu.
STEP 3: Scroll down to the "Virus & threat protection settings" section and click on "Manage settings."
STEP 4: Scroll down to the "Automatic sample submission" section and toggle the switch to the off position.
STEP 5: If prompted, click "Yes" to confirm the action.
Method 2: Using Registry Editor
If you prefer to use the registry editor to stop automatic sample submission by Microsoft Defender, you can follow these steps:
STEP 1: Press the Windows key + R on your keyboard to open the Run dialog box.
STEP 2: Type "regedit.exe" and press Enter to open the registry editor.
STEP 3: Navigate to the following path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender
STEP 4: If you don't have the registry key, then you can create it.
To do so,
Right-click on the Windows Defender in the left pane, and select New => DWORD (32-bit value). Then, type DisableAntivirus and click OK. The registry key is created.
Follow the above steps to make DisableAntiSpyware and ServiceStartStates registry keys.
STEP 5: Now, double-click on the DisableAntivirus registry key.
STEP 6: A prompt box will appear.
Set the value to 1 and then click OK.
STEP 7: Close the registry editor and restart your computer for the changes to take effect.
Method 3: Using Local Group Policy Editor
STEP 1: Press the Windows key + R on your keyboard to open the Run dialog box.
STEP 2: Type "gpedit.msc" and press Enter to open the local group policy editor.
STEP 3: Navigate to the following path: Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus
STEP 4: In the right panel. you will see the "Turn off Microsoft Defender Antivirus" setting. Double-click on this setting
STEP 5: A prompt box will appear.
Select the "Enabled" option.
STEP 6: In the "Options" section, select the "Send all data" option and then select the "Never send" option.
STEP 7: Click "Apply" and then click "OK" to save the changes.
That's It!
Comments