Exetools - Universal PatchGuard and Driver Signature Enforcement Disable

Exetools (https://forum.exetools.com/index.php)

- x64 OS (https://forum.exetools.com/forumdisplay.php?f=44)

- - Universal PatchGuard and Driver Signature Enforcement Disable (https://forum.exetools.com/showthread.php?t=18273)

Universal PatchGuard and Driver Signature Enforcement Disable

Tool created by myself (Fyyre) and long time friend EP_X0FF. It disable driver signing enforcement and Patch Guard on Windows 7, 8 & 10.

https://github.com/hfiref0x/UPGDSED

I highly recommend run patch.exe -nf -- this switch currently avoid bug we are researching when KiFilterFiberContext function is patch directly.

Enjoy,

-Fyyre

this works if in bios we have bios secure enable ?

Quote:

Originally Posted by niculaita (Post 109539)

this works if in bios we have bios secure enable ?

Secureboot? Sorry, no.

Nice, is there any advantage over WindowsD ?

From what I can tell WindowsD (https://github.com/katlogic/WindowsD) does not disable PatchGuard.

This patch does not work with Win7 SP1. I tried both versions 1.1.2 and 1.2.1 on the Administrator account with or without -nf switch but always error:

Code:

Universal PatchGuard and Driver Signature Enforcement Disable



WARNING: Using this tool might render your PC to an unbootable state.

If you want to continue type CONTINUE (all uppercase) and press Enter



CONTINUE

Patch: Windows Version: 6.1.7601, LegacyBIOS



Patch: Symbol dlls extracted successfully.

Patch: Dbghelp initialized.

Patch: Copy files to %TEMP%

Patch: Copy success

Patch: Scanning ntoskrnl for patterns



Patch: Ntoskrnl version: 6.1.7601.17514



-> SeValidateImageData          0031F6F9

-> CcInitializeBcbProfiler      004D1540



Patch: Cannot query KeInitAmd64SpecificState offset: Nie można ukończyć wykonywa

nia tej funkcji.



Patch: Cannot locate patch offsets for ntoskrnl.

Patch: Press Enter to exit

P.S. Fortunately, the old version of patch from 2012 - no_pg_ds_v3 works without a problem ;)