I have recently set up a new development machine (Lenovo T440p laptop with Windows 8.1 Pro), and this event keeps getting logged to the Event Log (about once every 2.5 minutes):
The Windows Security Center Service could not stop Windows Defender.
I have Windows Defender turned off and have Trend Micro Security Agent installed and running. The Action Center shows both "Virus protection" and "Spyware and unwanted software protection" as On, with Trend Micro listed below them. In the Services console, the Windows Defender service is set to Manual start up and is not running. I tried setting the start up type to Disabled (through the registry, since the option is grayed out in the services console), but the event keeps coming up every 2.5 minutes.
If Windows Defender is not running, and the service is in fact disabled, why am I getting a message that it could not be stopped? It's not running to begin with. It doesn't throw any errors, cause any popups or notifications on my machine, or in any way prevent my computer from functioning properly. However, I use this machine for software development, and all of my software writes to the event log. I almost always have it open and monitor it for errors, information, and general output from my software. The occasional system event or event from another application mixed in is fine (and expected), but this message popping up every two minutes is cluttering the event log unnecessarily, and as far as I can tell, shouldn't be happening.