Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

A quick search took me to some sites which provide a driver to disable it. However, they don't look trustable and I'd not want to install a rootkit.

What are some trustworthy options of disabling PatchGuard?

How can we disable patchguard for Windows 7?

share|improve this question

migrated from stackoverflow.com Jun 6 '11 at 19:36

This question came from our site for professional and enthusiast programmers.

    
I believe patchguard is part of the kernel, so you would need some sort of patch to load before the kernel does at boot time, at least this is how advanced Malware circumvents it. –  Moab Jun 6 '11 at 21:53

2 Answers 2

From Wikipedia:

In January 2006, security researchers known by the pseudonyms "skape" and "Skywing" published a report that describes methods, some theoretical, through which Kernel Patch Protection might be bypassed. Skywing went on to publish a second report in January 2007 on bypassing KPP version 2, and a third report in September 2007 on KPP version 3. Also, in October 2006 security company Authentium developed a working method to bypass KPP.

Nevertheless, Microsoft has stated that they are committed to remove any flaws that allow KPP to be bypassed as part of its standard Security Response Center process. In keeping with this statement, Microsoft has so far released two major updates to KPP, each designed to break known bypass techniques in previous versions

So since patching the kernel is wholly unsupported by Microsoft, there's no "trustworthy option" to disable it -- you're always going to have to rely on some dodgy hack.

share|improve this answer
    
Yes obviously Microsoft don't support it. If they would, it defeats the whole purpose of creating PatchGuard in the first place.... So, we are asking for credible workarounds. Dodgy hacks are fine (and indeed the only way) as long as they are not malware. –  Pacerier Mar 19 at 18:55

https://libertas.lt/code/patchguard/

I used this version, based on the work of Fyyre (http://fyyre.ivory-tower.de/). After installation on a test PC I kept an eye on outbound network traffic for a while in my router (Ubiquiti Edge) and didn't see anything. Fyyre's site also has Windows 7 SP1 and Windows 8 patchguard disablers.

This patchguard disabler only supports Windows Vista, 7, 8.1, and Tech Preview 10 64bit.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.