Windows 10: Add or Remove Windows Defender Exclusions in Windows 10

Is there a way to exclude a registry entry through the exclusions mechanism?

I have disabled MsMpEng.exe from making outbound network requests via a firewall rule (don't worry, I disable the rule once in a while to allow Defender to update itself; I just don't want it consuming my bandwidth every single day!)

However, in every scan, Defender complains about the firewall rule, flagging it as a trojan:

Code: Trojan:Win32/BlockMsav.A!reg Alert level: Severe Status: Quarantined Recommended action: Remove threat now. Category: Trojan Details: This program is dangerous and executes commands from an attacker. regkeyvalue: HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{---ID removed---}[/quote] I'd prefer to tell Defender not to mess with my firewall rule, which apparently boils down to a registry entry in the end; so if there's a mechanism to exclude a registry entry itself from the claws of Defender, that would be my saviour *Smile

It may be out of scope, but any other alternatives for disabling MsMpEng.exe from arbitrarily accessing the network would also be highly appreciated *Smile

 

Hello fishytuna, and welcome to Ten Forums. *Smile

Does setting you network connection to be metered stop Windows Defender from automatically downloading and installing its definition updates for you?

Set Wireless Network as Metered or Non-Metered in Windows 10 Windows 10 Tutorials

Set Ethernet Connection as Metered or Unmetered in Windows 10 Windows 10 Tutorials

 

Thanks @Brink for the suggestion! Unfortunately I'm using a USB-tethered internet connection (which is hence treated as a wired connection by windows); AFAIK Windows doesn't allow wired connections to be marked as metered (have tried it on my own as well, with no luck; the "set as metered" switch automatically turns off as soon as I leave the connection settings page).

 

Even using option 2 below? You might also see if the USB tethered connection may show as something different than "Ethernet" in the registry with this option. Might also see if setting "Default" as metered may help.

Set Ethernet Connection as Metered or Unmetered in Windows 10 Windows 10 Tutorials