0

Some of you might know privacy.sexy. It gives you plenty of options regarding your Windows privacy and security settings. However, after a major Windows update, those settings will be reset by Windows.

I developed some code to keep my settings persistent even after those updates. For now I started by creating a Service DLL and persisting this into the svchost.

In this regard, I have two questions:

  • When running the batch file from privacy.sexy, Bitdefender is blocking the cmd execution. I can exclude it from Bitdefender, but is there another way than creating an official program to get it trusted by Antivirus programs? (Was thinking about Antivirus evasion, but that wouldn't be a reliable approach)

  • Will the Service DLL also be detected and blocked by antivirus programs?

10
  • 1
    What an AV will detect is entirely up to the specific AV. Ultimately, you need to test.
    – schroeder
    Commented Dec 23, 2023 at 15:06
  • Indeed, thats what I thought. So the only way would be to create some antivirus evasion, testing it for all Antiviruses and changing it as soon as some antivirus tools are detecting it. Or simply tell the users what to exclude exactly. Thank you for the answer. Was not sure if I did miss anything. Will make the project open source as soon as it is in a ok-ish state.
    – Dr3xler
    Commented Dec 23, 2023 at 15:11
  • Why test against all AV? Just test against the one you are using (Bitdefender).
    – schroeder
    Commented Dec 23, 2023 at 15:12
  • Because I thought about making it open source for all who want to have a solution for the known problem as well.
    – Dr3xler
    Commented Dec 23, 2023 at 15:13
  • 1
    Is it possible you can do something similar using Group Policy or something that actually does properly persist? Commented Dec 25, 2023 at 8:54

0

You must log in to answer this question.

Browse other questions tagged .