From 9bb10bd7fb1e80b168792c6f64740951164bf736 Mon Sep 17 00:00:00 2001 From: qtkite Date: Sat, 12 Mar 2022 23:44:47 +1100 Subject: [PATCH] tamper protection --- README.md | 2 ++ README.md.bak | 46 +++++++++++++++++++++++++++++++++++++++++++ resources/tamper.png | Bin 0 -> 10660 bytes 3 files changed, 48 insertions(+) create mode 100644 README.md.bak create mode 100644 resources/tamper.png diff --git a/README.md b/README.md index 621def6..e64163b 100644 --- a/README.md +++ b/README.md @@ -15,6 +15,8 @@ Sometimes windows decides to update and turn itself back on. A common issue is that defender control sometimes doesn't want to disable tamper protection again. Please try turning off tamper protection manually then running disable-defender.exe again before posting an issue. +![Tamper](https://github.com/qtkite/defender-control/blob/main/resources/tamper.png?raw=true) + ## What does it do? 1. It gains TrustedInstaller permissions 2. It will disable windefender services + smartscreen diff --git a/README.md.bak b/README.md.bak new file mode 100644 index 0000000..01a88ed --- /dev/null +++ b/README.md.bak @@ -0,0 +1,46 @@ +# Defender Control +Open source windows defender disabler. +Now you can disable windows defender permanently! +Tested from Windows 10 20H2. +Also working on Windows 11 + +## What is this project? +We all know that disabling windefender is very difficult since microsoft is constantly enforcing changes. +The first solution is to install an anti-virus - but thats not the point if we are trying to disable it! +The next easiest solution is to use freeware thats already available on the internet - but none of them are native & open source... +I like open source, so I made a safe to use open source defender control. + +## On windows updates +Sometimes windows decides to update and turn itself back on. +A common issue is that defender control sometimes doesn't want to disable tamper protection again. +Please try turning off tamper protection manually then running disable-defender.exe again before posting an issue. + +## What does it do? +1. It gains TrustedInstaller permissions +2. It will disable windefender services + smartscreen +3. It will disable anti-tamper protection +4. It will disable all relevant registries + wmi settings + +## Is it safe? +Yes it is safe, feel free to review the code in the repository yourself. +Anti-virus & other programs might flag this as malicious since it disables defender - but feel free to compile it using visual studio. + +## Compiling +Open the project using visual studio 2022 preview. +Set the build to Release and x64. +Change the build type you want in settings.hpp. +Compile. + +## Demo +![Demo](https://github.com/qtkite/defender-control/blob/main/resources/demo.gif?raw=true) + +## Release +You can find the first release over at the releases on the right. +Or alternatively click [here](https://github.com/qtkite/defender-control/releases/tag/v1.2). + +## TO-DO +- [x] Disable security center +- [x] Add silent mode +- [x] Confirm win 11 support +- [ ] Better cli support +- [ ] Build an interface diff --git a/resources/tamper.png b/resources/tamper.png new file mode 100644 index 0000000000000000000000000000000000000000..b0a51f48c96d71ffb099257fc7bb70286ea46e37 GIT binary patch literal 10660 zcmdsdXH=8h_h!86PZ7a_8j)s01Ox<8I$T6VK!}vk10oJ_92NLN~SJ zk)7P`eyn7KwYZf zuIpj`Tp-|q{WAbSxZ}_300CC+4gkn%7~j*k4tHkI1gjw6wzUll_1971N8`?EOAp@p zU3K|U@q-us8A+!MO*aC{TeY7=1IkVW{X=^B_UQG=M41<-BhH^Zbht}i;rgkA35~;M z>a8YkO(N{B-~I6M*zX4qSDH7~$h(-m(M2a;2DW9?xr8ibYx7fHXJe zNBX^2gE@OdRXMliCfx=+&Qq<4cW8UY{3t*WkjXz;7%~68)`x@+dT?}`7UuHlcdvY3 zd!2!C&skfip%F=~wbp0qE43Y8*&DMR1!0q-Py2JvzD_L_z4i1}WlghOm3>2*Oy9PD z`_BA&1qd$p@ZHTK@xK7)>6w}Cr!23^WzBXwoG~``hP`$ht-tv%xa;ENYUF8wrZ-lZiJI@@+EguW4n zGSa_*nqEe58BJnqkE2(gA(M!UPy9PZF)sM=7SUYWSylXe#O?;c4gX}WH!FEAJVOSQ zLiCNuHSfc3PeyfQ%3AfxF5mH=7z>x`EHfK*E#Kpe;m&3>7# zSpJvcK3%bBo2y3x?E+oj&^XM#llV6?PefmP@6CJ#E)3mNp!VKS^h#c0SR}?#8#&ha zWmlqXV(C>yDRYXnfsVlM4 z+(6V8TyrL!{}>GAh6xt4B@88oziSc`;u5No6>y^wZnU?c<3_cE@>6*sPhm)}goM(-Z0|8%CX@s#ko< zg2E`?sCuPN;JOvJ_S1=cIM`+J5VeV#_!Ctg&#tFIZ8?dCgJl!q2uS8W0<_FCjo#SP1zxd^ed^_ zDic9{3a&`_mbX(r2EWG%N}Mb=(f#%1;ECh>Y2-NYD<3jM*76rqTfl~Rk)sw8S%cvB z+7Us!hu^rMY$l^O``J6ol^C0v%CC*`&(y8UzUOP)LX;^g#=!r(#ex7|$ljIV(VGi; z`=3|Po4_y5?{wjjt&gLUfJ!L|LkCZ2KN1$0PLL^#Plf5`Y=9oFwQWz<@|~N&K~+hx z9&|4%zb{P~4;h63^?-^_=k=%-Eq3q0sdaCpPkB3{5PO?Q0^uP=5e$X*%Az{&EgsQh z>+@l=_I9tPY{W_(VP;{peGAKOGGQi%2LuE(;18$_GZnw`H$Qyc3b>{5Z2nb_b7aL5 zENHB2Jxtz$q5D=tg1; zjo(euEvREHx(?Z#WQrm5qY8`NpRaPf}_HS zHGEg>EH|3_qAcoE%g6Jh#W8i@R;#}N037^(4YQmprz1Zf0suZ>KK;3*{%_0w>NvPv z`incYkNC9tLo08ls^Nzm;cK}Wf5 zEA*9rq;?wT+<}Vxh^z^bN+XCC%UMYDxt&y8WZ_aNm{RsVkCG6MP$;E_y9_j96wS|N0_uEn*<*Yo8L{Y3sn> zw+gOIhR-I~pIDsybUCwtX_j`FFo22S(KoDu9Rv9$FYJkghqhw1Z{9p0wi)WFB}kv46irigz86 zD`KvG3E`s=#lYIGoP(5tL3sna^J;hjK7v8Vn>1(?Nj39+7d2mU)uT$%4Cl|GD!wLr zLsB&6-;D|PWh?l;+2^0Vq`4lCIR=g94R1JjlKSRHHHAJ-E~yqrK&eajN>!lFG~xD@ z`o0-;W4h~R&x<3H=k-XF1A6<>#Axz0*?!n&f=jz(V1;gac4eTC9=61+gtZR!rxMHi zt(&aOH9jh*raz^oK1A_)D3Csv*6=_l5Y-48GrCs+cN&h2S275Bry1hoghcbcB~Gbz{q8$Hc4^>hNE^_OuI!S~T5ms>a?Sh0k-5S9ERP!wjn~D4 z2lYK%Hr0(6z@o+VJRC{6{EpWC?q=SWvV=&k3(NU)kVihq!&<^ha{=8y{On;fOcWoJ zSRE5-Zc6PMKtaQPXe@NH9^{}jrveEQW^@nLY9-8aZdzf^@az~;OOrueEV$tkOoKMj zX7pVfOT69*OKOc%Ulh3>E4Ui`(;GF?+8i&&cyj^o-jhBy<>NeH{__GxVnnf&VsRVO zJE+d`-3k3Yaubd#_6G0K!lr1~U5>m?KQr{A##Qrr$lD64ur9WPpHq##164T}XOxjl ziz0pBfe^cqLfAe~|HJ3w!ZP)6yCAYvFLvrVe+dA+VL~!WvBI9w-qB zKFc`h(C+1+<-P1)npCA=0G*~9HSTFv*o#umwVPp;yfg}z%R+|3v1#VPh}@zTQ1d1# zu-ZI0*JxKITGU6czzN!#azyKe%}}F*k{b=V^WAd>g=?F~uQt=4;D?MUTL-C14;=^z zA~OEC!h&+%ZA^AG{7X}TF0ZT43$MP>DI!MniW27sw!nPKbz0axZW{_3N`*FcZSVtI zwUZH}#YEFj!>5DE9tx^zryL<+aE)&FxcSN3KKakAsbr4r8;7%qbpB1K!!@Lz7eny?yflbqalt*AN-;-x;BU{lRq=7{W-{9shV+oQ`neY&w1{q|uN~o{1 zLdO=yoLfA!H;}jXC;7pRgB=2hIA14bc(`M!+|j^B|?TibjdxllEkpXD>%TdBU^3)X0ePoSGvv?M9=@ZMpd8w>>ZzkhfW##HS zhn-_?#_lLyxx^IN;Nxc5{@1c*YEFF7BW{HRPjhGU`Qn7zZ18q56^=G(u5l>KX3&ce zC5NmD&`2X-iBeMOy(!%l-1{fjGv_!FXF|nXj?@T0miVT*jy2%G>Z|7&^M?wCp%Ds% z(C8T3$BkYEM3yBRmR2FYtYcZz&RJ&ne}Lk=n(A|gz)e_;f0=bk_d(ffnZd;(>F`-!Lm5|E zF0n*RTIcEYO@9H#m>g!ATEEyii)4vGuI@Im{g>R+5C@m;qasgakq4$$Z=>^;$4uo6 znmA@^Q;(^}R4{cQJ>7W?RLr|v{f{)2v1lH@jOL8f4nYq_i8o45H5+B%OD_5dYS}bO z3=?F?cOnCu#T;s4M&9Cf9@HoORBTx}-Sm3d2e>cCNP#(m^f0Tfjgb=*3I#ysCqr(! z&Tnxvn&IZBC97O}2ef8c=7(g3{p)~zKf2tS=TQ4tf8t26k=OOUu5VPijMGutvr-z1 zV(kTf{GFMVh}6f}x?bN5Ef#r&zi8bL16F5Fx(o`hp==?+e{F<4Q;kuRF@)z0YcC~5 zFjV&ZmvyWoU)Y90b|ru$edwL^DR%H>a>5Orz%hYG9X!UkLeaf`iZ%Ts!*i|ZP3PW7 z0^E`1vFOon&ir&ggxDIYGODIeGxN#0Xj8!E8q<9kFz90?2MRPSD$r83O|g`bUSmUF z6j`3Wx~PeuNOyphV7`v!x|~K}K(ZMu)geS}&`ZzC%Q=f1s}x-%E;57ZY6fRb#8d1R zEEwB+;o-&FB4&5Y#}=e53J4Y*0ukLDSjrvd%GupRovy19yn9uwfI=(dwS zMEZM%sAs-~xy3e0k5^Imy-4z8r2B_@-ZO9HTd*;mwsg4HeB=(NY#MpR_j5HOM8ydQ z=P3k8-^1y0Zg)S>Y3BzEGpw_NUY638Iz1snhq&cZ_#^0GA}+Q)f&TSzX1Q0Cb=&B# zrDA_-?G%$SL2-fpl)|D5NavajoRCpGn5KF&A9TZ{N`9;U zz`aPJF*lOa5jsI5;ieB*Dz)iQ$3jZ2h?dgMWZ*iTl@Bx z@&EbpF4?$eUpJat@9R$T!DcJNCR>B#-juQEqpwMowmI;&qPfa^XM27Y@1~cl>~>$g z?Dxo&H%*oH^XKF7rXD^!HoMC!b-NpKp3jVExU(bMggC~~OyZ7PSK`?$?ugg$7CCUp zf6AhzAE}35p{FVB$-RQr_y`LL);PZ|a5^4?-qT2*S3Kdmg*7B(OX<1A{s%2w5&NR^Q+9e z@+;*k)UDs;>NT^D`&w202KK3S;_1ZCr4LMe3@t4+{2T9bF)9Cqa#Q%k+1#g7NlJU@ zb1C@7h_Mx4U&A0v!3^DD?fgYw_bAjaG1R{47<@EvnvUA@)j0HRw9%V5v+#SatEqUn zFltrQIfloo$F#{~T2-_+zu%f}-TdJjU3o(>z?Dz-o#5w0$vnXQL8TwZrgyjo>Y=V0 z0F7@dvKsDFjIV)4d?;S;>|T!r`AhA=w})C79|iT(KB?Vpl1xtCB#tpGXl0GA&2#?1 zb0PH5kmd_05!QxX@tq``X>Z5z z;9TmKGPxU<9~|{Q7_vPTvmf;RS~cZI_L_H|*9CYP^>0-WslF4_z>u#VYh7Z>5#uVV zLb>JG1R;?3dk1GNI=R~ShEf5UQcMbWqo)2po@{q>!_d6#e2F`GPx+Si z&xauw@teu3Glzy%osmz7W8rn)i3hK50gphe@Gky=mI)nIQ)P7sg-Z1os{V68nV0I$ z#Bo(`c2Jd{ybNO$)$d9FnNvU>D68XKuTn_NcuG_a6(cXZ&7QTX>G$n8>tGbi0?JI3 zA$&!AJ+n{FM$YTcd;qJKa*hF-uaB6wJF7n^47*y;@I{-e8n))5YcE=}mI zlT(wq-8mn~;oBB%-vAs;zY3enH!s-%ECB@Iq zg2nFss`qtg-m0eMJYuYe%!y@(@P;{M> zM5(t#BJAGAW7{xPM%~w5I+?9edxoAhbQs}UM0h;mw?4?0btAgMDPPtNmv&!?f_qn16 zNAVuaLh%iQ^=fB{vkXcnpr)yE3|kFvZu#UB9@sd+WxG)aJB6jxILIhef*}fiE%stw zoW_3D?MS1| z<{jok)i^d`Qo%leve@QmDSlql^2s8Z#V0p=l|%O04z%6+IVDybxRvt4y3MxMwIi-O zh>$8J1>1LgpLkGM{bI^3g9x=ED~)0V$b-*jc6dx(i^N}oz(8x7iyLRl^USMCOpFzN!hwt^}Z7@oIPk1?m(GZ;;q z4+h<|H`daFiIN4ulvL|g_%_XUi}cZ>@_TR$D>Ym){O5~+i9kY^KemA(SdjtJ)lj5L zfu8aok+iv^vZDM%tG!04ojvoEo+o)?Myjd&p(9X7vjOgqqRUxSe@Mg@|K^4B^Dj9E zoaBJLeWHEC)2=|UB7XPxm@rPSayM%AvrOoT92k=6MDlJiA?=kw{T2@NW9Gs!ZCeiG z;L%le>}DdSgSkZPtJC>FxBJec2Q$V<_r>X?fj2#cw_4x^P3RPV1ft!NkN zewRFwY+)}g9hvj1(M=6x;;uTWFr;7n&tnoAym9&C1JJiC#xgfH>r&xW7G;JlA~tH# z8doaVp$+y0QIUU%x{6$T7(cM0@cDv?%B>5H1FRstn1D}HFqOK8PO5->Ptn;LTmSjb ziSAYZ3ZY?@GhpNI0gF%2vpgKt-}eU9B{=IM+C?Bsx-MHav?J!!V3Yv@a%Ks5vV>(V z_PtO?Yc;QV%uy%uBPkTD1r`;r!e7Dhwx|T}5cBhB8)~5SfIQJ$VEQw+ukhFu_wQ3y zNv~W}=eO_TUY$Ov@T`l}FYqlDgg#*lA4bZjUgB?)(`8n-55ADxBE8k$FLQ89!PB&K zO8lM-v}Jv<6II`2T^Upe-x{xnJ(J^hNbLoTHzmyb=6qkgS1FiceqL5<{P^}EbPy5d zRUBypx1yd#SCaL^29rAN?<0x<*Rq*+8${ajCg3V_wkjV&t~)AF z70a5RQ)#hs6s1bCDJ5AO5pCf)iV<8 ze|&n6-o<225OXq1_5L~QWoMgq45b()R^)`Xs z5`$P18P9mEQ9{zaN>~)QQHLype=B;-_e4LeN~e7z8Ptdke2bMDRtr!i+coBn;UPKYAaGfpL@%ZG%`P_=2ESSdKO zL<*`&MsFE_QiZ^T3MMk8!?$zsG40xnXjKN`>=jQKg?HG7UxHk>G&%tNBK&pz#qBHU*!? zjylT|0D$L1>0rzH4q>fVO7JDq=}qK*^vde%u*nFS2|lf_%vYf8g!%mvZP{j)DsT?7 zHemW|HzZBkH2am2WW-hN?TKfutYuQ59p+(y=IzO}p@R4CZ+UjR@>zI+q;m?#_*C1Y zl_UK7vkWbR7K>iT(Q8^1{rKT%x&l>rEC&*5Z-?~(^Oe2|#RX&xVvN7Cjz2O$!2Em9 zEp1u8-XeNcx`lyr{KT*DI{uUjeD=#1=rfS z{u<{10OsAPjPyVCgm}n^g)6^)a-D3Am>WDP%n!-yd_G1)JmAZLY2^N{XY`v*KFr?K z-uaa=cc$%Q=P!ycMu@L;2;#Z4wHX?}lVnf}&NE(DCWwoOoaRyHz6vVccpVqeE$Z1x z(1;|=wynWo=k*ZLE95@Z1+@#zboybS)5*Q9CVVU?dPZcU?nky=lRu=Kx>^@QuCkxA z1_1o>IJue8iw07ONc=u;Z5FjC^Dkr3!;a@3-gv{MT^oU}F%fR|Na*G(m3G1vTI*j9 zcC5CnNuE=3b`loYNEy5}pl!7k%P#DvWAM&f2LQEDy07IEy?yx7$DA3|;=<>G;~u$b z#XyLMddwHIFyl{8~-HNH#$eER*}5IgUBL_?-%`1w^iO0;8q)4EgzHgA(A&KWD_cEgP{jmovLC z8MP*%=W#s->8`pT*Q3i_5z(uz;mdSt{GBeI_?Uor;r54Ytgpl(c`KeCwrlpZ%%fnP zm)=HUcY~Ws&n6R-s`!@=7$@v)Y7I%r5Tz_cc=lmD@lR)Y)#+LCw%PEuk3ch!=2Gbx zoG)Q@5BM*pB{^G@`l`T6J%y3W71Ml6l;r{d=c)X^oQT=yZJ_F#*)Bmn(tH!kNXH;p zmCE`A*txKF1 z>1Na7oW};aK=M#vrp`t-hCa-cL^gtwfqpNt8>HY zQ|-p~-^?6qsfb@`?3hWWrtIL9&U+OPlU=K=Tb@7ObnuNwgr8EJkrLxmCX;>FWYZ)< z$1d#|+VZ+=Lbf~pXy^N>60tn}TYUG3;%7BaXF3x$_H%~@0$FMg<2FaFTZ-@$^m+b5 z@JEODBlx&?-!}UX@STt1a55hA@zCJEtfv0g_1ORYCk*bF{z}3ho90))k^sO>n?Mv_ z7#wwrnn{BV_dz1{-@N}!)kHvwbU*$kGy&ToxhrIAhS zz-KwHYwH(vm-A0fI!k?>5xo@s3=Gc&IXfZmw{O3gK_-%HKi`^%I>c3d(tM@nGOoH` z+4UQ-E5-6JQF)W)+iqVqo9MgTm$Z2<1j(E}Y0fp)(AW34(Ne#10PuKa2>dx_qsxVq zc*t#YIzyM=!}A+^S-*UnZpCwTYKz&z=9Njjvz0%cX2x6I;vMU!zpik?AD6PpP9FVD z!bJF8VEKku?v0OLCF+qTq+WlH@Po6K{)a6opWe}J*ZAFcNgIFT6(PocZ4`2n=BmD; zN9W|4^j(;}X`4Yx8#bI&|@46!$>LpMCIH1EylsBGm(}9pTCQ z5x>gjhtr4Yr=_L#l;b9c2DPqoZufetK`+#}kQPrRtX^9jN)nRlA>8aJ>NE)RP0@_9 zDhO3Pjbe^!6wcSV930o?w=;H^@9keb&qt@X+gkkYzsKJ%${qj!?EfDgMUPJJAEery WtNL^hYtHv;fU%+Zy_&m^U;Z~tawtv! literal 0 HcmV?d00001