The end-of-support pop-up notification can't be disabled, and downgrading isn't really an option: Microsoft Security Essentials (MSE) would upgrade itself again, sooner or later. While you could still try to prevent it from upgrading, there's no guarantee that the old MSE version would still receive updates as usual.
Considering the notification is generated by the user interface executable, you can override it with an earlier version while keeping the up-to-date engine.
Update (May 30, 2014)
As commented by @saulius2, the registry changes were detected as a tampering threat. My previous method has been abused by malware creators for malicious purposes, and that's why MSE complained about it. To solve this issue I've since switched to a different approach. In case you applied this workaround before, just follow steps 6-7 again.
Eventually you will need to switch to a different antivirus solution, as the MSE definition signatures won't be updated anymore on Windows XP after July 14, 2015. For the time being, however, the steps below should do the trick:
- Get a copy of version
4.4.304.0 of the MSE installer. Any language will do, see the file information below.
- Log on with an administrator account, and extract the
mseinstall.exe file using 7-Zip.
- Open the
x86 folder, and extract
epp.msi though 7-Zip.
- Rename the extracted
msseces.exe file to
msseces2.exe to the MSE install folder (e.g.
C:\Program Files\Microsoft Security Client).
Open a command prompt, type or paste the following command, and press Enter:
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MSC" /t REG_SZ /d "\"%programfiles%\Microsoft Security Client\msseces2.exe\" -hide -runkey" /f
Note Although unlikely, make sure to repeat steps 6-7 should MSE upgrade in the future.
Until April 8, 2014:
April 8, 2014 onwards:
Click for larger view.
Microsoft Security Essentials will not be available for download on Windows XP after April 8, 2014. If you already have Microsoft Security Essentials installed, you will continue to receive anti-malware signature updates through July 14, 2015.
Source: Support for Windows XP for Enterprise Business is ending
220.127.116.11 of Microsoft Security Essentials was deployed on the 26th of March, 2014. On Windows XP, the status displayed permanently became Amber/Yellow indicating "Potentially Unprotected."
After the 8th of April, the date support for Windows XP ended, the status became Red indicating "At Risk."
This is by design due to the fact that Windows XP end of support is 8 April, 2014.
- You cannot change the status of Microsoft Security Essentials to Green on Windows XP after the upgrade.
- The notification tray icon for Microsoft Security Essentials will remain Red or Amber/Yellow if no other issues are detected.
- You cannot uninstall the upgrade and return to the prior version as it will automatically upgrade.
Source: Microsoft Security Essentials 18.104.22.168 on Windows XP - At Risk > 9 April, 2014
As Microsoft no longer provides MSE for download on Windows XP, you need to rely on third parties who can provide the old setup package. Here are the basic details and hashes of the official US English (
en-US) installer and the user interface executable (which is language neutral):
Size: 10.6 MiB (11125072 bytes)
Size: 926.2 KiB (948440 bytes)
While different languages have different setup packages (hence different details), all of them include identical copies of the
msseces.exe file, which has to be digitally signed by
Microsoft Corporation, and countersigned by
Microsoft Time-Stamp Service; both signatures must be valid. You can check them by opening the file properties dialog.
You can use any of these, or find an alternate source yourself. While the actual file name could be different, the other details provided above must match exactly.
Make sure to scan the files using your antivirus, and upload a copy to VirusTotal to feel confident enough. If possible, test the program in a safe environment first. When you're done, make a backup of the executable.
[MSE] also provides a registry [value] to show the current end-of-life status of the current OS if it’s near end-of-life. [It's called]
EndOfLifeState [and is stored in]
Stage 1: OS is approaching end-of-life. At this stage, the OS is near the end of its support lifecycle. [MSE] will still work as normal.
Stage 2: Grace period. OS has reached end-of-life, but anti-malware platform service is still running and definition updates can be received. For example, for Windows XP, the Grace Period stage starts on April 8, 2014.
Stage 3: Anti-malware service stopped. You can no longer start the anti-malware service, and your computer will not receive anti-malware definition updates. Thus [MSE] will no longer help to protect your computer. For example, for Windows XP, this stage starts on July 14th, 2015.
Source: FEP and SCEP anti-malware protection support after OSes reach end-of-life
Despite what the official source says, the third stage may happen sooner than expected: as the commenter KY noted, the anti-malware service will stop as early as June 15, 2015. Whether intentional or not, this was confirmed by my tests as well.