Windows Update Disabler v1.0

[TechLord]

A small tool that I coded that would enable us to TURN OFF and TURN ON Windows Updates as per our wish.

CONFIRMED WORKING for Windows 10 versions upto and including the Release 1703.
Not sure if it would work for later versions (did not test).

This tool can be used with the installed version of the Customized Windows 10 [Release 1607] for Reversers that I shared earlier on.

SUGGESTED USE:
When we are debugging something and need to stay connected to the internet but do not want the OS attempting to download updates (and maybe restart) at that time, then we can use this tool to temporarily turn off the check for updates.


Do not worry in case your AV detects this as malware - Its a false positive.

Download:

http://www93.zippyshare.com/v/zODekggJ/file.html

SHA256: 4938d88398c30487b7d6de743b306ab016c153c05ba483bd14b0df0803f604b2
MD5 : 5960a804cd244005cb909b84a3515527

P.S:
Please do not use this tool to turn off the updates permanently as this could put your computer at risk

[niculaita]

http://downloads.novirusthanks.org/files/win_update_stop_setup.exe
from https://sanet.cd/blogs/mordigian/win_update_stop.2499946.html

[deepzero]

How does it work?

[TechLord]

@Niculaita:
Thanks but this tool of mine is guaranteed to work on the Windows Versions that I release

@deepzero: Nothing very new Will write in detail later ...

[elephant]

Great work Techlord. Looking forward to the technical details in how you disable the updates. Any chance to release the source code?

Many thanks

[TechLord]

Originally Posted by elephant

Great work Techlord. Looking forward to the technical details in how you disable the updates. Any chance to release the source code?

Many thanks

Dear elephant,
At this time I am limiting the release of the sources for this and other related tools etc to only our forum members who have actually worked on developing Open Source software to any significant extent.

This way, I feel that anyone who would actually be able to improved the code would be able to do so.

On the other hand, not indiscriminately releasing sources would prevent "script kiddies" and those who want to just modify the GUI a bit and re-sell it as their own, from doing so.

While this is just a tiny tool with just a single function, in the future, I would be releasing more complex programs and I think that this logic makes sense.

I would like to add that for the veterans here, it would take less than 3 minutes to figure out how this tool works in any case
So obviously, they would not even need the sources

[yoza]

Originally Posted by TechLord

A small tool that I coded that would enable us to TURN OFF and TURN ON Windows Updates as per our wish.

CONFIRMED WORKING for Windows 10 versions upto and including the Release 1703.
Not sure if it would work for later versions (did not test).

This tool can be used with the installed version of the Customized Windows 10 [Release 1607] for Reversers that I shared earlier on.

SUGGESTED USE:
When we are debugging something and need to stay connected to the internet but do not want the OS attempting to download updates (and maybe restart) at that time, then we can use this tool to temporarily turn off the check for updates.


Do not worry in case your AV detects this as malware - Its a false positive.

Download:



SHA256: 4938d88398c30487b7d6de743b306ab016c153c05ba483bd14b0df0803f604b2
MD5 : 5960a804cd244005cb909b84a3515527

P.S:
Please do not use this tool to turn off the updates permanently as this could put your computer at risk

Nice tool TechLord...
This works fine on my Windows 10 RS3_1709_Fall_Creator...

[mr.exodia]

The ProcStartargs function appears to be copied from/heavily inspired by https://github.com/Nummer/Destroy-Windows-10-Spying/blob/master/DWS/MainDwsForm.cs#L333 (same uppercase typo + same 'random' order of ProcessStartInfo initialization + same inefficient way of copying the standard output)

The functions to enable/disable are also pretty much the same (exact same order or command line options), except the "sc" command is used instead of the powershell service thing. https://github.com/Nummer/Destroy-Windows-10-Spying/blob/master/DWS/MainDwsForm.cs#L1476

The usage of the "Sysnative" path is also very similar, just this tool has fewer features than the original.

https://github.com/Nummer/Destroy-Windows-10-Spying/network/members (search for "TechLord")
https://github.com/TechLord-Forever/Destroy-Windows-10-Spying

archived pages:
http://www75.zippyshare.com/v/jJ84CeNo/file.html

All of that is toppled by the use of a legit (sorry for confusion) enigma for no apparent reason other than:

On the other hand, not indiscriminately releasing sources would prevent "script kiddies" and those who want to just modify the GUI a bit and re-sell it as their own, from doing so.

Seriously?

[TechLord]

Originally Posted by mr.exodia

The ProcStartargs function appears to be copied from/heavily inspired by https://github.com/Nummer/Destroy-Windows-10-Spying/blob/master/DWS/MainDwsForm.cs#L333 (same uppercase typo + same 'random' order of ProcessStartInfo initialization + same inefficient way of copying the standard output)

The functions to enable/disable are also pretty much the same (exact same order or command line options), except the "sc" command is used instead of the powershell service thing. https://github.com/Nummer/Destroy-Windows-10-Spying/blob/master/DWS/MainDwsForm.cs#L1476

The usage of the "Sysnative" path is also very similar, just this tool has fewer features than the original.

https://github.com/Nummer/Destroy-Windows-10-Spying/network/members (search for "TechLord")
https://github.com/TechLord-Forever/Destroy-Windows-10-Spying

archived pages:
http://www75.zippyshare.com/v/jJ84CeNo/file.html

All of that is toppled by the use of a pirated enigma for no apparent reason other than:

Seriously?

You are making a lot of assumptions my friend.

It does not behove you, being a MODERATOR here, making ASSUMPTIONS that I am using a PIRATED version of Enigma or whatever.

For your kind information, it is a PURCHASED copy, and it is licensed to the one of the developers in my company.

If you had bothered to check, the TAGGANT would show that it is NOT a PIRATED copy !
Yes, it happens to have a VALID TAGGANT.

Mr Exodia, if you are unhappy that I pointed out in this forum a few months ago that you posted stuff about CODEMETER without giving me credit when it was me who provided everything right from the samples, LICENSES, to the very OS that you used for the analysis, this is really not the way.

Everyone please note that I never needed Mr Exodia's help with CODEMETER. It was HE who wanted the samples and licenses to test them out on HIS debugger.
Mr Exodia, you can feel free to check and quote from the SLACK conversations that we had regarding the codemeter debugging to prove me wrong.
After that it was YOU who decided to post stuff here about codemeter without bothering to give ME credit.

OR, if you are unhappy that my answers were accepted in preference to yours on Stack Exchange a month ago, this is really not the way to try to ACCUSE members of this forum that they are using pirated Enigma or whatever, especially when you are WRONG.

Because other than these two places, I had never even seen you nor crossed your path for the past several months !

In fact, yes, it was for Mr Exodia that me and some of my staff spent nearly a week in May 2017 to create the Windows 10 Pro Reverser Editions.
You forget that you were all praises for the distros at the time.

Readers can clearly see how respectfully I mentioned Mr Exodia(without naming him) in the posts where I shared the Windows 10 OSes saying that I created them for a distinguished staff member of this forum and in contrast, how CHEAPLY a moderator of this forum decided to attack me for NO REASON whatsoever, and with BASELESS accusations that I am using PIRATED enigma.

Readers can see what a detailed study Mr Exodia seems to have made by digging into my GITHUB and trying to search for stuff line for line LOL to search for similarities to others' code.

Isn't his motive apparent ? Otherwise there is NO NEED for him to spend SO MUCH time trying to decompile protected code and then write in such detail

Mr Exodia seems to forget that only less than an year ago, he was literally begging me on several occasions to use the x64dbg debugger to reverse malware and then post the video tutorials to promote his debugger.
Have you forgotten that Mr Exodia ?

Do you want ME to NOW take screenshots of all those conversations and then post them on ZIPPYSHARE as archive for the whole world to see ?

Have you forgotten how you were begging for donations and when I donated you said that you and your girlfriend had a good meal with it ?
Just several months ago - not very long time ago.

Do you want me to give more detailed accounts ? Or should I stop ?

Don't forget Mr Exodia that it was YOU who released the Armadillo Killer Tool (AKT). DO you know that if the Armadillo guys decide to sue you, you could be bankrupt ? And maybe in JAIL ?
And now YOU are accusing ME of using pirated Enigma.

One thing that I want to point out : By releasing this or any other tools, I am not making a SINGLE cent.
The tool here was released only to serve a PURPOSE.

Everyone here knows that I am not a programmer. I never hid it from you or anyone else.

I was trained in Malware Analysis and Reverse Engineering. You know that.

Whatever I release, it is for the good of all. I do not make a single cent from it.

There ARE a lot of individuals who want to SELL stuff after making minor mods and sometimes, more importantly, by APPENDING MALWARE to it.

That is the MAIN reason that I "protect" the software that I release.

EVERYONE reading this would know that there are INNUMERABLE tools available online to turn off Windows Updates.

Its not as if I am going to get a Nobel Prize by creating this tool

Finally Mr Exodia , why the JEALOUSY ? It was ME who ALREADY said this in my post 2 posts above this :

"I would like to add that for the veterans here, it would take less than 3 minutes to figure out how this tool works in any case"

Did you have to stoop to THIS level Mr Exodia, to accuse ME of using a PIRATED ENIGMA when you are the MASTER PIRATER of Armadiilo and other software ???

Obviously, Mr Exodia being a MOD can delete this post in a second.

If he DOES do that, please be assured that I have taken screenshots of this and his post and will post this everywhere on every reversing forum online.

[niculaita]

https://www.youtube.com/channel/UCr7mc3aEKhS8a8piXVk88Cw

Folk please relax!

[TechLord]

Originally Posted by niculaita

https://www.youtube.com/channel/UCr7mc3aEKhS8a8piXVk88Cw

Folk please relax!

Even you posted link to an alternative tool the very same day that I posted this (Just below my first post in this thread).
But did I say anything ? In fact I posted a thanks, right ?

Why ?

Because you meant well. Sorry but there are no need for Mr Exodia to accuse me of piracy (among other things) when he does not even know that what I used was a purchased copy from my company !

Also, just yesterday, Mr Exodia posted something presumptuous in another forum, and was given a FITTING reply by another member. See this :

https://s17.postimg.org/e7yn866rz/Mr_Exodia_RUDE_on_tuts4you.png

[mr.exodia]

First of all, it should go without saying that my post was not as a moderator of this forum.

Second of all, I apologize for saying you are using a pirated version of Enigma, I fully take it back. I just assumed, since sites like VirusTotal detected it as a generic virus, something the taggants were supposed to prevent iirc.

Anyway that was NOT AT ALL the point, the point was that your code was very similar to the code I found on the internet, which it still is, whatever version of Enigma you use or personal threats you make.

[TechLord]

Originally Posted by mr.exodia

First of all, it should go without saying that my post was not as a moderator of this forum.

Second of all, I apologize for saying you are using a pirated version of Enigma, I fully take it back. I just assumed, since sites like VirusTotal detected it as a generic virus, something the taggants were supposed to prevent iirc.

Anyway that was NOT AT ALL the point, the point was that your code was very similar to the code I found on the internet, which it still is, whatever version of Enigma you use or personal threats you make.

The fact also remains that here I am minding my own business, but you decide to suddenly go dig in my github account 7 hours ago, FORK an ANCIENT repo from 2016 from it, then decide to dig into it line by line, make a ZIPPYSHARE archive of it (probably you fear that I will delete it - NO I will not care to, since I did NOTHING wrong), then you decide to spend hours decompiling an enigma virtualized app, then YOU decide that a NON-PROFIT tool I'd whipped up in a few minutes to help this community use my ISOs more effectively is PLAGIARIZED, and then create a detailed post about it !

I meant that you being A STAFF should behave MORE RESPONSIBLY when posting something, especially when you are ACCUSING a SENIOR MEMBER who is much older to you, of using pirated software to protect and release programs, that too free of cost.

That too, when YOU were the one who said in no uncertain terms that you were PAID to reverse Arma apps. Do you remember ?

Should I make a screenshot and POST that conversation, the way you decided to , with a ZIPPYSHARE archive and all ?

Many here think that you are nice person who shared the AKT tool for FREE.

Just say YES, and I will post that conversation. If you DARE.I am STILL giving you the confidentiality and the CHOICE.

Pot should not call the kettle black. Nor should people who live in glass houses throw stones at each other.

EDIT:
I respect confidentiality when someone does a conversation/chat with me.
That is why I am not going to post the evidence UNLESS and until Mr Exodia decides to say that the statement I made above regarding him getting paid for cracking Arma apps is fake.

I am not threatening, blackmailing or whatever.

But while Mr Exodia has actually been PAID for cracking (he said so himself in his own words) and now he accuses OTHERS of piracy, then thats bad !

Especially when I am sharing stuff free of cost.

Did you even pay TAX on that amount ? No wonder PAYPAL keeps blocking your funds every now and then (You said that too yourself) and you even TWEETED it out publicly one

Pot calling kettle black ? and that too for NO REASON when I am minding my own business !

EDIT ON EDIT:
Since you like to ARCHIVE stuff so much Mr Exodia and post, here's an archive of this thread, for posterity :

http://archive.is/NZ67k

[mr.exodia]

I just used MegaDumper and dnSpy, everything was over and done with in less than 10 minutes (including the time to set up the vm). I never said you plagiarized anything, just that your code is very similar to the code of an open source program. I even apologized for my false claim that you used a pirated enigma. That is all, I'm not sure why you're making such a big deal out of it?

And no, I am not denying that I was paid to reverse Armadillo apps, exact quote from me:

no, i was paid to reverse arma apps

As a 15/16 year old 200 euros is a lot of money and I was helping a good personal friend with a few apps he lost the hardware for, big deal. I even paid the relevant taxes.

Anyway, to prevent any further illusion you can somehow pressure me or that I am somehow a shady person or jealous(?), here is an unredacted export of the slack history in reverse order (sorry, the script I used https://gist.github.com/Chandler/fb7a070f52883849de35/ does it this way). You can probably find personal details about me in there, but I don't have anything to hide.

"U2AJ9S124": "techlord"
"U2ACM9R5F": "mrexodia"

http://www74.zippyshare.com/v/xRz6y84S/file.html

The reason I stopped interacting with you personally is this (reverse order again):

{
            "text": "I think that its enough that they have that much \"fear\" at least , hehe :smile:", 
            "type": "message", 
            "user": "U2AJ9S124", 
            "ts": "1506565858.000135"
        }, 
        {
            "text": "Having said that, I was told that the TSRH guys were *_already_* \"pissing in their pants\" (as per the statement from my ex-group Anonymous) and they *turned off their REGISTRATION for new members etc from last month itself from that time onwards, and is continuing to be off as at this time of writing* :smile:", 
            "type": "message", 
            "user": "U2AJ9S124", 
            "ts": "1506565825.000051"
        }, 
        {
            "text": "The Anonymous Group was concerned that the TSRH guys would say that they \"failed\" etc, but  all I said was that as far as *I* was concerned, I did not want them to procced wit the attack for *my* sake. SO it was called off, at least for the time being :smile: haha", 
            "type": "message", 
            "user": "U2AJ9S124", 
            "ts": "1506565706.000001"
        }, 
        {
            "text": "Because you are right : It does not reflect well on me should I hav eallowed them to proceed with the \"attack\"", 
            "type": "message", 
            "user": "U2AJ9S124", 
            "ts": "1506565511.000044"
        }, 
        {
            "text": "Because after the little \"chat\" that you had with me last month (reg the attck by my ex-group Anonymous on <http://tsrh.ws|tsrh.ws>), I *did* decide to \"call it off\"", 
            "type": "message", 
            "user": "U2AJ9S124", 
            "ts": "1506565489.000037"
        }, 
        {
            "text": "Though you are *_much_* younger to me, sometimes I find that you give me good perspective :slightly_smiling_face:", 
            "type": "message", 
            "user": "U2AJ9S124", 
            "ts": "1506565429.000132"
        }, 
        {
            "text": "How's life ?", 
            "type": "message", 
            "user": "U2AJ9S124", 
            "ts": "1506565386.000158", 
            "edited": {
                "user": "U2AJ9S124", 
                "ts": "1506565400.000000"
            }
        },

Oh, just in case it wasn't clear yet: I do not care at all about anybody pirating anything, especially on this forum.

Oh and I apologize for devolving the thread into whatever this is.

[TechLord]

Originally Posted by mr.exodia

I just used MegaDumper and dnSpy, everything was over and done with in less than 10 minutes (including the time to set up the vm). I never said you plagiarized anything, just that your code is very similar to the code of an open source program. I even apologized for my false claim that you used a pirated enigma. That is all, I'm not sure why you're making such a big deal out of it?

And no, I am not denying that I was paid to reverse Armadillo apps, exact quote from me:



As a 15/16 year old 200 euros is a lot of money and I was helping a good personal friend with a few apps he lost the hardware for, big deal. I even paid the relevant taxes.

Anyway, to prevent any further illusion you can somehow pressure me or that I am somehow a shady person, here is an unredacted export of the slack history in reverse order (sorry, the script I used https://gist.github.com/Chandler/fb7a070f52883849de35/ does it this way). You can probably find personal details about me in there, but I don't have anything to hide.

"U2AJ9S124": "techlord"
"U2ACM9R5F": "mrexodia"

http://www74.zippyshare.com/v/xRz6y84S/file.html

The reason I stopped interacting with you personally is this (reverse order again):

{
            "text": "I think that its enough that they have that much \"fear\" at least , hehe :smile:", 
            "type": "message", 
            "user": "U2AJ9S124", 
            "ts": "1506565858.000135"
        }, 
        {
            "text": "Having said that, I was told that the TSRH guys were *_already_* \"pissing in their pants\" (as per the statement from my ex-group Anonymous) and they *turned off their REGISTRATION for new members etc from last month itself from that time onwards, and is continuing to be off as at this time of writing* :smile:", 
            "type": "message", 
            "user": "U2AJ9S124", 
            "ts": "1506565825.000051"
        }, 
        {
            "text": "The Anonymous Group was concerned that the TSRH guys would say that they \"failed\" etc, but  all I said was that as far as *I* was concerned, I did not want them to procced wit the attack for *my* sake. SO it was called off, at least for the time being :smile: haha", 
            "type": "message", 
            "user": "U2AJ9S124", 
            "ts": "1506565706.000001"
        }, 
        {
            "text": "Because you are right : It does not reflect well on me should I hav eallowed them to proceed with the \"attack\"", 
            "type": "message", 
            "user": "U2AJ9S124", 
            "ts": "1506565511.000044"
        }, 
        {
            "text": "Because after the little \"chat\" that you had with me last month (reg the attck by my ex-group Anonymous on <http://tsrh.ws|tsrh.ws>), I *did* decide to \"call it off\"", 
            "type": "message", 
            "user": "U2AJ9S124", 
            "ts": "1506565489.000037"
        }, 
        {
            "text": "Though you are *_much_* younger to me, sometimes I find that you give me good perspective :slightly_smiling_face:", 
            "type": "message", 
            "user": "U2AJ9S124", 
            "ts": "1506565429.000132"
        }, 
        {
            "text": "How's life ?", 
            "type": "message", 
            "user": "U2AJ9S124", 
            "ts": "1506565386.000158", 
            "edited": {
                "user": "U2AJ9S124", 
                "ts": "1506565400.000000"
            }
        },

Don't try to be the "nice guy" here

First of all, I want everyone to see the sort of confidentiality that Mr Exodia has regarding the personal conversations that someone has with him : He posts the entire content online for everyone to see WITHOUT PERMISSION from the other party.

You did not stop interacting with me after that conversation. That conversation is dated 27 September 2017.

Anyway YOU know very well that we stopped interacting ONLY after you felt snubbed a couple of times on Stack Exchange and other places when people voted for and prefrred my answers over yours. I do not have time (unlike you) to archive everything and post it here. You can do a search there yourself if you're interested, please.

You also said that you were hired to do a PAID VMProtect Cracking Project later on.

Secondly. I am a working person managing a company and I do not have the free time to keep chatting non stop daily.
So do not get the impression that YOU are some great person and that everyone is trying to fall at your feet or something.

YOU have been investigated (not as Mr Exodia of course, but as Duncan Ogilvie) for FRAUD at least THREE TIMES in the last 8 months, by PAYPAL ( I am not even countingthe other financial institutions).
Why are you silent about that ?

Because IF YOU DARE to give consent, I can get PAYPAL itself to disclose all the details.
Of course, after that I am not responsible for your finanical condition or even if you go to prison or whatever.

I am DEAD SERIOUS about this. So please think and answer. Once you say yes, I cannot go back. And I do not want to be held responsible by any member here for your fate after that.

Please note that this is NOT a threat.

Since YOU claim to be so clean and therefore want to make our chats PUBLIC and that too WITHOUT my permission, I am saying that it would only be proper if all YOUR details are also disclosed, right

Everyone please note that the MODERATOR of this forum gives NO VALUE to one's PRIVATE CHATS but that I still am TAKING PERMISSION from him before I get PAYPAL to disclose all the investigation he was made to undergo for FRAUD.

Anyway I do not care that he discloses the details of the chats without permission as I have nothing to hide.

One Warning to others using the Mr Exodia's SLACK Channel for chat:
Some day, if he has any personal vendetta against you, he may just expose all of your chats as well. BEWARE !