antivirus program Archives

Tech Optimizer

May 19, 2025

Hackers can turn off Windows Defender with this sneaky new tool

A security researcher known as es3n1n has developed a program called Defendnot, which disguises itself as an antivirus application and exploits a previously undocumented Windows Security Center (WSC) API. Defendnot registers itself as a legitimate antivirus, causing Windows Defender to disable itself when it detects another antivirus, leaving users vulnerable. Microsoft has responded by enabling Defender to detect and quarantine Defendnot as 'Win32/Sabsik.FL.!ml'. This is not the first version of such a program; a previous iteration was removed due to copyright infringement.

Tech Optimizer

May 19, 2025

A spoof antivirus makes Windows Defender disable security scans

A researcher known as es3n1n explored Windows security mechanisms to bypass antivirus software validation checks in the Windows Security Center (WSC). He used tools like dnSpy and Process Monitor to analyze how legitimate antivirus solutions register with WSC. He confirmed that WSC validates the signatures of processes calling its APIs. Previously, es3n1n faced controversy when his project, no-defender, was removed from GitHub due to a DMCA takedown request from a software vendor.

Tech Optimizer

May 18, 2025

Defendnot tool pitched as ‘an even funnier way’ to disable Windows Defender

A new tool called Defendnot, developed by es3n1n, allows users to disable Windows Defender by using an undocumented Windows Security Center (WSC) API to simulate the presence of another antivirus program. This tool is a successor to the no-defender tool, which was taken down due to legal issues. Defendnot does not use third-party antivirus code and aims for a clean implementation. It disables Microsoft Defender upon activation, leaving users vulnerable to malware as it does not provide real-time scanning. Defendnot is designed to run automatically at Windows startup. Microsoft classifies Defendnot as a Trojan, raising concerns about its potential misuse by malicious actors.

Tech Optimizer

May 18, 2025

Do I need antivirus software for Windows 11?

Windows 11 accounts for nearly 44% of global desktop users as of April 2025, making it a prime target for cybercriminals, with 83% of malware in 2020 aimed at Windows systems. Microsoft Defender, which comes pre-installed with Windows 11, offers commendable malware protection, basic ransomware protection, a SmartScreen feature for anti-phishing, and a firewall that monitors network traffic. While it provides a solid foundation for security, additional third-party antivirus software can enhance protection, offering more comprehensive features such as superior parental controls, integrated VPN services, and identity theft protection.

Tech Optimizer

May 17, 2025

New ‘Defendnot’ tool tricks Windows into disabling Microsoft Defender

A tool named Defendnot can disable Microsoft Defender on Windows devices by registering a counterfeit antivirus product using an undocumented Windows Security Center (WSC) API. Developed by researcher es3n1n, it exploits the API to register a fictitious antivirus that meets Windows' validation criteria, leading to the automatic disabling of Microsoft Defender. Defendnot circumvents security measures by injecting a dummy antivirus DLL into the trusted Taskmgr.exe process. It also includes a loader for configuration customization and establishes an autorun entry through the Windows Task Scheduler for persistence. Microsoft Defender currently detects and quarantines Defendnot as a Win32/Sabsik.FL.!ml.

Tech Optimizer

May 9, 2025

Does Antivirus Software Collect Your Data

Antivirus software collects various types of data to protect systems, including system details (operating system version, RAM, CPU type, computer name), network data (local and external IP addresses, DNS server, network name), user data (Windows username, time zone, language, general location), browsing history (if web protection features are enabled), and file-related information (file names, locations, hashes, and sometimes entire files). The AV-Comparatives report indicates that while some antivirus companies manage data responsibly (e.g., F-Secure, G Data, K7), others (e.g., Norton, Panda, McAfee) have been criticized for poor practices. Data sharing can enhance malware detection but poses privacy risks, as seen in AVG's past actions of selling user browsing history. Users can limit data collection by adjusting settings, reviewing installation agreements, avoiding free antivirus software, choosing privacy-conscious vendors (like F-Secure, ESET, G Data), and reading privacy policies. Despite concerns about data collection, antivirus software is essential for protection against cyber threats, and selecting a transparent provider can help safeguard privacy.

Tech Optimizer

April 26, 2025

How to disable the PC webcam and protect it from unauthorized access

The webcam is a crucial tool for remote communication but poses privacy risks, particularly through a threat known as CamFecting, where unauthorized access can occur via malware, malicious websites, or system vulnerabilities. Preventive measures include using antivirus software, disabling the webcam when not in use, and physically covering the camera with privacy caps or tape. Signs of unauthorized access include unexpected illumination of the webcam light, unusual camera behavior, unknown files on the system, abnormal data consumption, and decreased battery life. To deactivate the webcam, users can adjust settings in major browsers and operating systems. Maintaining digital hygiene, such as regularly updating software, using security systems like firewalls and VPNs, and being cautious of phishing attempts, is essential to minimize risks.

Tech Optimizer

April 4, 2025

My takeaway when it comes to antivirus software and gaming

Antivirus software can slow down a PC during gaming, with performance dips ranging from negligible to about 20 percent during routine monitoring, and up to 57 percent during full or partial scans. Despite the potential for improved performance by disabling antivirus software, security experts advise against it due to ongoing threats like viruses and malware. Instances of malware in downloadable game files and phishing scams targeting gaming communities highlight the importance of maintaining antivirus protection. Gamers can consider antivirus solutions designed for gaming that minimize system impact, schedule scans for non-gaming times, and create exclusion lists for game files to enhance performance while ensuring security.

Winsage

March 24, 2025

What Is Runtime Broker On Your PC, And Is It Safe To Disable It?

The Runtime Broker is a core process in Windows that manages permissions for Universal Windows Platform (UWP) apps. It typically uses minimal CPU resources but can spike to around 30% when a UWP app is launched to verify permissions. High CPU usage may persist even after closing an app, which can often be resolved by ending the process in Task Manager. If issues recur with a specific app, users can either uninstall it or check for updates. Disabling the Runtime Broker is not recommended, as it may destabilize the system and compromise security. Users can verify the legitimacy of the Runtime Broker process by checking its file location in the C:WindowsSystem32 directory. If the location differs, it may indicate malware.

Tech Optimizer

March 8, 2025

How to Disable Antivirus on Your Computer

Antivirus software scans files for threats like viruses and malware and is generally recommended to be kept running continuously. However, it may need to be temporarily disabled in certain situations, such as to free up system resources, install a program that is being blocked, avoid false flags from the antivirus, or address privacy concerns. To disable antivirus on Windows 11, users can access Microsoft Defender through system settings and disable options like Real-time Protection and Tamper Protection. They may also need to disable the firewall if a download is blocked. On MacOS, the antivirus protection includes Gatekeeper, which cannot be disabled, and users can partially disable X-Protect but not Notarization. Before disabling antivirus, users should close non-essential programs, ensure they only download trusted files, and promptly re-enable the antivirus after completing necessary tasks. Disabling antivirus exposes the computer to potential malware threats, so caution is advised.