Re: [FD] Disable Windows Defender and most other 3rd party antiviruses

2020-12-11 Thread Roberto Franceschetti
@seclists.org > Subject: [FD] Disable Windows Defender and most other 3rd party antiviruses > > Windows Defender and most other antivirus applications can be disabled by > booting into safe mode and renaming their application directories before > their AV services are started in Windows

Re: [FD] Disable Windows Defender and most other 3rd party antiviruses

2020-12-11 Thread edwin
I tested your POC on Windows 10 home, build 1904, and it failed to disable Windows Defender. Windows Defender still loads in safe mode, so renaming the "C:\Program Files (x86)\Windows Defender" folder fails because an executable in the folder is running. To disable Windows Defender, you need t

Re: [FD] Disable Windows Defender and most other 3rd party antiviruses

2020-12-08 Thread Exibar
Windows Defender and most other 3rd party antiviruses Windows Defender and most other antivirus applications can be disabled by booting into safe mode and renaming their application directories before their AV services are started in Windows. The renaming of the directories can be performed by

[FD] Disable Windows Defender and most other 3rd party antiviruses

2020-12-07 Thread Roberto Franceschetti
Windows Defender and most other antivirus applications can be disabled by booting into safe mode and renaming their application directories before their AV services are started in Windows. The renaming of the directories can be performed by creating a Windows NT Service that is allowed to start