andyful / configuredefender Goto Github PK

According to virustotal the current version contains a Malware Heuristic 1003 similar to Trojan.Autoit.Wirus.

What could that be?

Hi,

I just have one question. What if we deploy Defender for Endpoint and the settings via Intune ? Will Intune overwrite the changes this tool is making on my device?

Thanks,
Adam

it seems like "check security logs" isn't working properly on windows 11 (tested on 22449.1000) instead it shows random strings of letters and numbers (maybe encrypted?)

Just today, my internet suddenly stopped working after booting up my PC. Pinging from CMD and browsing using Edge still worked; however, all other applications lost their access to the internet. After some troubleshooting, I narrowed the problem down to the HIGH-security settings of ConfigureDefender. After changing the settings to default, my internet started working correctly again.
Unfortunately, I cannot reproduce the exact steps to why my system's internet became unresponsive outside of running the HIGH-security preset. I was running the preset without issue for the better part of 2 months before the problem occurred, though.

The issue is probably not related to ConfigureDefender and is most likely a bug within Microsoft Defender, but I thought I'd share this nonetheless.

Used software:

Windows 10 Pro (x64), version 21H2 19044.1865

Antimalware Client Version: 4.18.2205.7
Engine Version: 1.1.19400.3
Antivirus Version: 1.371.1420.0
Anti-spyware Version: 1.371.1420.0

ConfigureDefender 3.0.1.1

It would be great to have an options description.

I was just wondering if it can work Server 2016/2019 as i use one in a standalone capacity? I can make most of the changes in an manual way, could this make those changes more quick for me?

Being annoying with this one im sure. Lmao

Windows Defender settings are stored in the Windows Registry and most of them are not available form Windows Defender Security Center. They can be managed via:

Probably should be "from"

Microsoft has just updated its ASR rules, a new rule with id 56a863a9-875e-4185-98a7-b882c64b5ce5 add into all the rules.
Name: abuse of exploited vulnerable signed drivers

Hi! First of all, i love your work and this program has helped keeping my PC secure! Thanks for that!

Question: I was wondering what this is: "RemoteIpMoProxyConfigDefender1.0LocalHost" ? It keeps spawning in %temp% even when i clear it. Whats its function?

Sorry if its a dumb question!

Thanks again!

can you reprogram it to check defender and other stuff by cmd not powershell, my powershell doesn't work and won't work, so program doesn't work.

Thank you for ConfigureDefender.

Anyone knows of a working fix/solution for Windows' warning/notification (yellow tray icon) when "Automatic sample submission" is set to Off or Prompt?

Pressing 'Dismiss' only clears it temporarily. The warning will usually come back after a mere PC restart.

(using Windows 10)

Hello @AndyFul!

Thank you for your software!
Have you thought about committing the source code to this repository, tagging releases,
and uploading .exe files to GitHub Releases?

Hello! I am loving your tool so far. Just installed it yesterday.

One thing I would like to request is the ability to set in the program to then set for Windows Defender for a time interval to check for intelligence updates. This is possible using Group Policy under one of the sections for Defender. I forget which one and I am not currently signed into my Admin user to check under which folder of Defender this resides in under the Policy editor.

It could be implemented in a couple of ways.
Either a defined # of hours depending on which Setting you choose (Default, High, Max), with the time interval varying depending on the level, or a drop down menu, or text box, to input the time interval to check for intelligence updates.

I usually have mine set for every hour. I know BitDefender has it's updater checking once an hour. Emsisoft does too I think. Those are the two I have used previously before switching to Windows Defender.

We are running a Windows Virtual Desktop Environment, based on Windows 10 Multi-Session. The OS describes itself as Windows 10 Enterprise for Virtual Desktops; when I try and run the executable it reports that "This program works only on Windows 10". Can ConfigureDefender be configured to run on this environment?

Bob

Thanks for making this handy program. Is it possible to add a GUIRegisterMsg for WM_MOUSEWHEEL as the GUI doesn't scroll with my mouse in default mode. If I send it WM_VSCROLL messages it will scroll but also it can scroll the comboboxes if one is not careful where the pointer is. Thanks again.

Windows 10 ver 21H2

The lastest version of ConfigureDefender.exe 3.0.1.1 May 2022 will not run due to Smart Screen saying unknown publisher: see attached screenshot.

I am currently running the previous version of ConfugureDefender.exe. 3.0.1.0
I have not had this issue before.

Thank you

Configure Defender unknown publisher 2022-05-31 222429](https://user-images.githubusercontent.com/106640188/171315461-bf29ac4b-66ca-4dc8-81a5-d6eb976ec9b1.jpg)

When opening the tool, it doesn't add the current config to the individual settings.

Desired state:
Open tool.
It retrieves current configuration of system and updates all fields/exceptions/etc
Changes made after the initial load are reflected in system.

This would make it easy to troubleshoot certain settings on an existing config (provided by MDM policy)

Currently, opening the app does not read the current configuration state, represented by Get-MPPreferences command

i have this bug that only occurs after using configure defender, i cannot read threat history from win defender app but i can do that in using configure defender threat history tab any idea how to fix it?

Hello,

can i reset the Settings to Microsoft Standard on Windows 10 and Windows 2019/2022 Server?

Daniel

Checked ConfigureDefender_x64.exe on Virus Total and 3 engines reported malicious software:

https://www.virustotal.com/#/file/16c103ee6b1350dc80b01548e6cdf63d00905f0307f7ea8d75fa6ad9e549dcc5/detection

Antiy-AVL - Trojan/Generic.ASVCS3S.1E5

CrowdStrike Falcon - malicious_confidence_60% (W)

McAfee-GW-Edition - BehavesLike.Win64.Dropper.tc

Dear Sir in these days the 2004 version for Windows 10 has been released, it is supported?
Thanks
Pietro

ConfigureDefender 3.0.0.1
Windows 10 Pro x64 Update 2004

Signed on as admin. User Account Control disabled. Running ConfigureDefender as admin.

Tried disabling "Scan all downloaded files and attachments." Restart ConfigureDefender and it's back on. Tried setting it to disabled again and hitting "Refresh" button, get this error:

(Using classic themes)

Not sure where to look as to what could be causing PowerShell from changing registry settings. I have other programs that use PowerShell to change the registry and they work without issue.

I don't have any other security programs installed, just Windows Defender.

ASLR 'Default On' defaults prevents execution of some installers like GoG and Bvckup 2. Is there any practical reason to run it?

Is there a way to run this from commandline?

IE run configuredefender.exe /high

If not is there some way it could be done?

Daniel

I would love to be able to export the settings via PoSh after I build the initial configuration. Something that would allow me to build the desired config and export it to take it along with me to import via other tools/work.

I opened it and it doesn't open and in the task manager it just consumes ram

Hello developer,

Could you please add a language option in the program to facilitate the use of users from different countries? Thank you in advance!