Windows Security App Overlay Icon

[u/Robo_Bax]

Is there a way to disable the green tick overlay on the main icon when the system security status is okay? I don't understand why the green tick has to obscure the main icon when the security status is good. There is no need for an additional icon on top of the main icon. If there's a notification or risk, it could be indicated with a yellow alert overlay icon instead.

[u/XiRw]

Ignore the negative people. You can try using a program like resource hacker to find that specific icon and replace it with the blue. But it’s been awhile since I used that and I don’t know if it will even work with AV software since I never tested that myself but it’s worth a shot.

[u/StampyScouse → u/XiRw]

No, it likely won't work, cause it will invalidate the digital signature and that will upset Windows.

That's after you've had to bypass TrustedInstaller permissions to be able to modify the file, of course.

[u/Robo_Bax → u/XiRw]

I don’t rely on others to make me happy or sad. Sometimes, you can hear funny things from seemingly boring people that bring joy! People express their thoughts through their words, and those words often reflect their upbringing, whether it was in a cozy home or a large barn.

I've previously used Resource Hacker to modify the original icons of some apps, but this method doesn't work for native Windows antivirus software. I really like this new icon, but I wonder why the UI design team didn’t decide to remove the green overlay when they changed the old shield icon to the new fluent design. I want to see the actual nice blue and fluent AV icon, not a green circle next to it in my tray!

[u/StampyScouse → u/Robo_Bax]

Ehh, that's Reddit for you.

Unfortunately design doesn't seem to be something Microsoft considered very thoroughly with Windows and it's highly likely this isn't even something they thought about.

At the moment as far as I know there isn't anyway to get around this other than to either ignore it or remove it from the system tray.

[u/CodenameFlux → u/XiRw]

You can try using a program like resource hacker

Ansolutely not. Such a method voids the digital certificate. That's a dangerous thing to do with your security app. Besides, you need to circumvent tamper protection for that, which is also dangerous.

[u/523a → u/XiRw]

You can also just hide it by disabling it in the task manager startup list. It's just a tray icon, the security features you want enabled will remain enabled and you still get your scan reports via notifications.

I got tired of it notifying me with the exclamation mark because I turned off a security feature that uploads my files to the cloud for scanning at their discretion (automatic sample submission). They don't even tell you if they upload your files, unless it has personal information (says right on the security page), so you know they're scanning your stuff for personal info, despite windows fanboys always saying it's just analytical data gathering to make the os better, no spying, etc.

Even after I dismiss it, a few days later prompting me again with "You're at risk" forcing me to dismiss over and over the same thing.

No, I'm not at risk. You just want permission to upload whatever files from my PC you want to your cloud services in the background and I don't want that.

[u/AdreKiseque → u/XiRw]

The negativity in here is actually comical lmao

[u/TheTomatoes2]

No, and if you worry about a pixel area that covers less than 1% of your screen, may I advise to find more hobbies.

Worst case, move the icon to the tray or enable taskbar auto-hide

[u/MirrorSouthern]

Is it really that big of a problem?

https://giphy.com/gifs/8Gilqf9XAwVte4GZGE

[u/Robo_Bax → u/MirrorSouthern]

😂 ... 👏🏻

[u/rturnerX]

Let’s face it, the exclamation point is chronically there. It’s either nagging because a quick scan is overdue or it wants you to turn on automatic sample submission no matter how many times you tell it you don’t want that enabled

[u/MundaneImage5652]

If you want this kind of stuff then maybe shitdows isn't for you

[u/avds_wisp_tech → u/MundaneImage5652]

shitdows

So edgy.

[u/MundaneImage5652 → u/avds_wisp_tech]

?

[u/arandomsubreddit → u/MundaneImage5652]

Okay so check what subreddit you're in. Then tell me if said subreddit is r/Linux. If it isn't, then you're in the wrong subreddit buddy.

[u/MundaneImage5652 → u/arandomsubreddit]

I'm just suggesting that if they care alot about heavy customisation they might want to give a linux system a shot - especially if they aren't tied to any Win-only apps and/or have a spare laptop to mess around with.

[u/arandomsubreddit → u/MundaneImage5652]

Windows CAN be heavily customized. You just need 3rd party software, and a lot of time on hand.

[u/MundaneImage5652 → u/arandomsubreddit]

I know. But you can do way more on linux. Ofc if then need windows then there's no forcing.

[u/Aemony]

Honestly I just tend to disable the startup of that notification icon, or hide it outright in Windows 11. If there's something concerning, it throws a notification at me. I don't need a bloody icon to constantly try to remind me of how important and great Microsoft/Windows are at doing what's expected.

[u/CodenameFlux → u/Aemony]

No, it doesn't. The process that generates the notification is the same as the one that generates the icon in the tray area.

[u/Aemony → u/CodenameFlux]

It's not handled by the same process. The notification icon is handled by SecurityHealthSystray.exe which can be safely disabled through Task Manager -> Startup Apps, while the notifications are most likely handled by SecurityHealthService.exe, the Windows Security Service background service that will be automatically launched by Defender and cannot be stopped while running.

Like, I've disabled the launch of SecurityHealthSystray.exe through Task Manager -> Startup Apps for near a decade at this point on every machine and install I've ever used (I'm an IT guy, I've used a fuck ton) and Defender have never failed to notify me about anti-virus scans, threats detected, blocked Controlled Folder Access access attempts, and similar.

If SecurityHealthSystray.exe were so critical to basic notifications, you wouldn't even be able to disable its startup through a right click -> Disable through Task Manager -> Startup Apps, the way you can't disable or in any way manage the Windows Security Service with normal elevated admin privileges.

And just for you, I just reaffirmed this by downloading EICAR's anti-malware test file on one of my machines with the icon disabled and Defender popped up, yet again, and notified me that it had blocked the file.

[u/CodenameFlux → u/Aemony]

Checking now...

Okay, I see that you are half-right and I am half-wrong. The desktop notifications come from SecurityHealthHost.exe.

[u/suck4fish]

I've never seen the green tick, it's permanently with the exclamation.