H20NET Posted September 2, 2016 Share Posted September 2, 2016 Hello, I was wondering if somebody has any idea how to permanently disable Windows Defender with the USB rubber ducky. I know you can disable it but I cant figure out how to permanently disable it. It would be nice to know because then you can run backdoor persistence without getting it deleted. If someone knows please comment! Thomas Quote Link to comment Share on other sites More sharing options...
Francisco Amato Posted September 4, 2016 Share Posted September 4, 2016 You can use powershell: Set-MpPreference -DisableRealtimeMonitoring $true Or just delete it: sc stop windefend sc delete windefend Quote Link to comment Share on other sites More sharing options...
H20NET Posted September 5, 2016 Author Share Posted September 5, 2016 Thanks Francisco Amato for the tips! Thomas Quote Link to comment Share on other sites More sharing options...
digip Posted September 5, 2016 Share Posted September 5, 2016 I used services.msc, scroll down to windows defender, double click, set to disabled, then stop the service. you can also go in and disable the scheuled tasks for definition updates and scheduled scanning if the task is there. I deleted the task when I first set my machine up. No need to sc delete, although I can see why you'd want to, have fun restoring it if you ever decide to run it again. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.