separated antivirus/security components

ionuttbara · Feb 29, 2024 · c124d05 · c124d05
1 parent d7221a8
commit c124d05
Show file tree

Hide file tree

Showing 18 changed files with 2 additions and 4 deletions.
diff --git a/...ve_defender/DisableDevDriveProtection.reg → ...ecurityComp/DisableDevDriveProtection.reg b/...ve_defender/DisableDevDriveProtection.reg → ...ecurityComp/DisableDevDriveProtection.reg
diff --git a/Remove_defender/DisableLSAProtection.reg → Remove_SecurityComp/DisableLSAProtection.reg b/Remove_defender/DisableLSAProtection.reg → Remove_SecurityComp/DisableLSAProtection.reg
diff --git a/...enanceTaskreportinginSecurityHealthUI.reg → ...enanceTaskreportinginSecurityHealthUI.reg b/...enanceTaskreportinginSecurityHealthUI.reg → ...enanceTaskreportinginSecurityHealthUI.reg
diff --git a/...leMicrosoftVulnerabileDriverBlocklist.reg → ...leMicrosoftVulnerabileDriverBlocklist.reg b/...leMicrosoftVulnerabileDriverBlocklist.reg → ...leMicrosoftVulnerabileDriverBlocklist.reg
diff --git a/Remove_defender/DisableSmartScreen.reg → Remove_SecurityComp/DisableSmartScreen.reg b/Remove_defender/DisableSmartScreen.reg → Remove_SecurityComp/DisableSmartScreen.reg
diff --git a/Remove_defender/DisableSpyNetTelemetry.reg → ...e_SecurityComp/DisableSpyNetTelemetry.reg b/Remove_defender/DisableSpyNetTelemetry.reg → ...e_SecurityComp/DisableSpyNetTelemetry.reg
diff --git a/Remove_defender/DisableSystemMitigations.reg → ...SecurityComp/DisableSystemMitigations.reg b/Remove_defender/DisableSystemMitigations.reg → ...SecurityComp/DisableSystemMitigations.reg
diff --git a/Remove_defender/DisableTamperProtection.reg → ..._SecurityComp/DisableTamperProtection.reg b/Remove_defender/DisableTamperProtection.reg → ..._SecurityComp/DisableTamperProtection.reg
diff --git a/Remove_defender/DisableUAC.reg → Remove_SecurityComp/DisableUAC.reg b/Remove_defender/DisableUAC.reg → Remove_SecurityComp/DisableUAC.reg
diff --git a/Remove_defender/DisableVBS.reg → Remove_SecurityComp/DisableVBS.reg b/Remove_defender/DisableVBS.reg → Remove_SecurityComp/DisableVBS.reg
diff --git a/Remove_defender/ExploitGuard_d.reg → Remove_SecurityComp/ExploitGuard_d.reg b/Remove_defender/ExploitGuard_d.reg → Remove_SecurityComp/ExploitGuard_d.reg
diff --git a/...efender/MitigationofFaultTorelantHeap.reg → ...ityComp/MitigationofFaultTorelantHeap.reg b/...efender/MitigationofFaultTorelantHeap.reg → ...ityComp/MitigationofFaultTorelantHeap.reg
diff --git a/...fender/RemovalofAnti-PhishingServices.reg → ...tyComp/RemovalofAnti-PhishingServices.reg b/...fender/RemovalofAnti-PhishingServices.reg → ...tyComp/RemovalofAnti-PhishingServices.reg
diff --git a/Remove_defender/RemovalofSecHealthUI.reg → Remove_SecurityComp/RemovalofSecHealthUI.reg b/Remove_defender/RemovalofSecHealthUI.reg → Remove_SecurityComp/RemovalofSecHealthUI.reg
diff --git a/.../RemovalofWindowsSecurityActionCenter.reg → .../RemovalofWindowsSecurityActionCenter.reg b/.../RemovalofWindowsSecurityActionCenter.reg → .../RemovalofWindowsSecurityActionCenter.reg
diff --git a/...defender/RemoveSecurityandMaintenance.reg → ...rityComp/RemoveSecurityandMaintenance.reg b/...defender/RemoveSecurityandMaintenance.reg → ...rityComp/RemoveSecurityandMaintenance.reg
diff --git a/...er/RemoveWindowsDefenderFirewallRules.reg → ...mp/RemoveWindowsDefenderFirewallRules.reg b/...er/RemoveWindowsDefenderFirewallRules.reg → ...mp/RemoveWindowsDefenderFirewallRules.reg
diff --git a/Script_Run.bat b/Script_Run.bat
@@ -33,7 +33,6 @@ goto :eof
 ::killing proceses
 CLS
 echo Killing Processes which are using Windows Defender Files...
-taskkill /f /im explorer.exe >nul
 taskkill /f /im smartscreen.exe >nul
 taskkill /f /im SecurityHealthSystray.exe >nul
 taskkill /f /im SecurityHealthHost.exe >nul
@@ -55,10 +54,9 @@ echo Unregister Windows Defender Security Components...
 :: Registry Remove of Windows Defender
 FOR /R %%f IN (Remove_defender\*.reg) DO regedit.exe /s "%%f"
 FOR /R %%f IN (Remove_defender\*.reg) DO PowerRun.exe regedit.exe /s "%%f"
+FOR /R %%f IN (Remove_SecurityComp\*.reg) DO regedit.exe /s "%%f"
+FOR /R %%f IN (Remove_SecurityComp\*.reg) DO PowerRun.exe regedit.exe /s "%%f"
 CLS
-echo Removing Files...
-Dism /online /Disable-Feature /FeatureName:Windows-Defender-Default-Definitions /Remove
-Dism /online /Disable-Feature /FeatureName:Windows-Defender-ApplicationGuard /Remove
 :: Removing files and folders
 for %%d in ("C:\Windows\WinSxS\FileMaps\wow64_windows-defender*.manifest" "C:\Windows\WinSxS\FileMaps\x86_windows-defender*.manifest" "C:\Windows\WinSxS\FileMaps\amd64_windows-defender*.manifest" "C:\Windows\System32\SecurityAndMaintenance_Error.png" "C:\Windows\System32\SecurityAndMaintenance.png" "C:\Windows\System32\SecurityHealthSystray.exe" "C:\Windows\System32\SecurityHealthService.exe" "C:\Windows\System32\SecurityHealthHost.exe" "C:\Windows\System32\drivers\SgrmAgent.sys" "C:\Windows\System32\drivers\WdDevFlt.sys" "C:\Windows\System32\drivers\WdBoot.sys" "C:\Windows\System32\drivers\WdFilter.sys" "C:\Windows\System32\wscsvc.dll" "C:\Windows\System32\drivers\WdNisDrv.sys" "C:\Windows\System32\wscsvc.dll" "C:\Windows\System32\wscproxystub.dll" "C:\Windows\System32\wscisvif.dll" "C:\Windows\System32\SecurityHealthProxyStub.dll" "C:\Windows\System32\smartscreen.dll" "C:\Windows\SysWOW64\smartscreen.dll" "C:\Windows\System32\smartscreen.exe" "C:\Windows\SysWOW64\smartscreen.exe" "C:\Windows\System32\DWWIN.EXE" "C:\Windows\SysWOW64\smartscreenps.dll" "C:\Windows\System32\smartscreenps.dll" "C:\Windows\System32\SecurityHealthCore.dll" "C:\Windows\System32\SecurityHealthSsoUdk.dll" "C:\Windows\System32\SecurityHealthUdk.dll" "C:\Windows\System32\SecurityHealthAgent.dll" "C:\Windows\System32\wscapi.dll" "C:\Windows\System32\wscadminui.exe" "C:\Windows\SysWOW64\GameBarPresenceWriter.exe" "C:\Windows\System32\GameBarPresenceWriter.exe" "C:\Windows\SysWOW64\DeviceCensus.exe" "C:\Windows\SysWOW64\CompatTelRunner.exe" "C:\Windows\system32\drivers\msseccore.sys" "C:\Windows\system32\drivers\MsSecFltWfp.sys" "C:\Windows\system32\drivers\MsSecFlt.sys") DO PowerRun cmd.exe /c del /f "%%d"
 :: part 2