I appreciate knowing how to do this, but I don't think booting into safe mode and deleting an exe counts as being "allowed" to disable scanning. It's a workaround, but definitely not a solution from MS.