一个安全中心的右键菜单（能实时开启和关闭 Win defender实时防护和防篡改）

qq8899399 · 发表于 2025-12-13 16:34:59

本帖最后由 qq8899399 于 2026-5-29 04:36 编辑

MDL 论坛翻到的一个小软件

作者项目主页：https://github.com/wesmar/WinDefCtl

WinDefCtl 是一个命令行实用程序，它通过 UI 自动化 API 提供对 Windows Defender 实时保护 (RTP) 和篡改保护设置的自动控制。它具有隐蔽执行功能，使用户无法察觉安全配置的更改。

WinDefCtl — Windows Defender 自动化和控制实用程序 v2.0
通过 UI 自动化完全终止 Defender 引擎 + RTP/TP 滑块控制

平台建造执照

⚡ v2.0 版本新增功能
v2.0 引入了无需重启即可完全终止 Defender引擎的功能——无需 PowerShell、WMI 或第三方工具。
它结合了离线 IFEO 注册表单元操作和 ring-0 内核终止功能kvckiller.sys。

命令       它的作用
WinDefCtl kill       IFEO 阻塞 + 内核终止MsMpEng.exe+ SecurityHealthSystray.exe+ SCM 停止SecurityHealthService
WinDefCtl restore       删除 IFEO 条目 + 开始WinDefend+ SecurityHealthService+ 重新启动SecurityHealthSystray.exe
WinDefCtl rtp off|on|status       通过用户界面自动化（叠加层）切换实时保护
WinDefCtl tp off|on|status       通过用户界面自动化（叠加层）切换防篡改保护

单个独立可执行文件——无需安装程序，无需依赖项，无需运行时 DLL。以管理员身份
运行。

🚀 用法
WinDefCtl kill             # Kill Defender engine (no restart required)
WinDefCtl restore          # Re-enable Defender engine

WinDefCtl rtp status       # Check Real-Time Protection state
WinDefCtl rtp off          # Disable Real-Time Protection
WinDefCtl rtp on          # Enable Real-Time Protection

WinDefCtl tp status       # Check Tamper Protection state
WinDefCtl tp off          # Disable Tamper Protection
WinDefCtl tp on          # Enable Tamper Protection

更新作者 WinDefCtl 2.0版本

如图   微信图片_20251212213403_607_542.png

WinDefCtl脚本如下

更新2.0

复制代码

整合右键菜单批处理如下

@echo off
if /i "%UserName%" == "SYSTEM" (Goto GotAdmin) else (reg query "HKLM\SYSTEM\ControlSet001\Control\MiniNT" 1>nul 2>nul&&Goto GotAdmin)
:BatchGotAdmin
Set _Args=&Set Args=%*
if `%1` neq `` Set "_Args=%Args:"=""%"
if exist %WinDir%\System32\fltMC.exe fltMC 1>nul 2>nul||(echo CreateObject^("Shell.Application"^).ShellExecute "cmd.exe","/c """"%~f0"" %_Args%""",,"runas",1 >"%TEMP%\getAdmin.vbs"&(CScript 1>nul 2>nul&&CScript //nologo "%TEMP%\getAdmin.vbs" 1>nul 2>nul||"%TEMP%\getAdmin.vbs" 2>nul)&del /f /q "%TEMP%\getAdmin.vbs" 2>nul&Exit /b)
:GotAdmin
Pushd "%CD%"&cd /d "%~dp0"
if "%PROCESSOR_ARCHITECTURE%"=="x86" set bits=32
if "%PROCESSOR_ARCHITECTURE%"=="AMD64" set bits=64
REM 检查命令行参数
if "%~1"=="install" (
goto install
)
if "%~1"=="uninstall" (
goto uninstall
)
Rem 设置程序路径
SET "_file_path=%~dp0"
Rem 设置命令行
SET "_cmd_cmd_enable=powershell Start-Process cmd -Verb RunAs -ArgumentList '/S /K pushd \"%%V\" &\"%~dp0WinDefCtl.exe\" rtp on &\"%~dp0WinDefCtl.exe\" tp on &exit'"
SET "_cmd_cmd_disabled=powershell Start-Process cmd -Verb RunAs -ArgumentList '/S /K pushd \"%%V\" &\"%~dp0WinDefCtl.exe\" rtp off &\"%~dp0WinDefCtl.exe\" tp off &exit'"
SET "_cmd_scripts_enable=\"powershell.exe\" \"-Command\" \"\"& {Start-Process PowerShell.exe -ArgumentList '-ExecutionPolicy RemoteSigned -File \"%~dp0WinDefCtlCN.ps1\" all on' -Verb RunAs}\""
SET "_cmd_scripts_disabled=\"powershell.exe\" \"-Command\" \"\"& {Start-Process PowerShell.exe -ArgumentList '-ExecutionPolicy RemoteSigned -File \"%~dp0WinDefCtlCN.ps1\" all off' -Verb RunAs}\""
Rem 设置注册表初始值
SET "_regkey1=HKCR\*\Shell\WindowsSecurity"
SET "_regkey2=HKCR\Directory\Shell\WindowsSecurity"
SET "_regkey3=HKCR\Directory\background\Shell\WindowsSecurity"
SET "_regkey4=HKCR\Drive\Shell\WindowsSecurity"
SET "_regkey5=HKCR\DesktopBackground\Shell\WindowsSecurity"
:Menu
SET Options=
ECHO.&ECHO. 1.安装 WinDefCtl 鼠标右键菜单
ECHO.&ECHO. 2.卸载 WinDefCtl 鼠标右键菜单
ECHO.&ECHO. 3.退出
ECHO.
SET /P Options=[92m请输入选择项目序号并按回车确认：[0m
IF /I "%Options%"=="1" GOTO install
IF /I "%Options%"=="2" GOTO uninstall
IF /I "%Options%"=="3" GOTO OUT
ECHO.&ECHO.序号无效，请重新输入！
PING -n 2 127.1>NUL
CLS
GOTO Menu
:install
REM 删除残留注册项
reg delete "%_regkey1%" /f
for %%i in ("%_regkey2%" "%_regkey3%" "%_regkey4%" "%_regkey5%") do reg delete %%i /f
Rem 单独处理 HKCR\*\Shell\WindowsSecurity(for循环直接导入通配符*会失败)
Reg.exe add "%_regkey1%" /v "Icon" /t REG_SZ /d "%%ProgramFiles%%\Windows Defender\EppManifest.dll,-100" /f
Reg.exe add "%_regkey1%" /v "MUIVerb" /t REG_SZ /d "Windows 安全中心" /f
Reg.exe add "%_regkey1%" /v "Position" /t REG_SZ /d "Bottom" /f
Reg.exe add "%_regkey1%" /v "SubCommands" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%" /v "SeparatorBefore" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%" /v "SeparatorAfter" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\001flyout" /v "Icon" /t REG_SZ /d "%%ProgramFiles%%\Windows Defender\EppManifest.dll,-100" /f
Reg.exe add "%_regkey1%\shell\001flyout" /v "MUIVerb" /t REG_SZ /d "&安全中心主页" /f
Reg.exe add "%_regkey1%\shell\001flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\001flyout" /v "SeparatorBefore" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\001flyout" /v "SeparatorAfter" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\001flyout" /v "CommandFlags" /t REG_DWORD /d "64" /f
Reg.exe add "%_regkey1%\shell\001flyout\command" /ve /t REG_SZ /d "explorer windowsdefender:" /f
Reg.exe add "%_regkey1%\shell\002flyout" /v "MUIVerb" /t REG_SZ /d "&病毒和威胁防护" /f
Reg.exe add "%_regkey1%\shell\002flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\002flyout" /v "Position" /t REG_SZ /d "Bottom" /f
Reg.exe add "%_regkey1%\shell\002flyout" /v "SubCommands" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\002flyout\shell" /v "SubCommands" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\002flyout\shell\001" /v "MUIVerb" /t REG_SZ /d "病毒和威胁防护设置主页" /f
Reg.exe add "%_regkey1%\shell\002flyout\shell\001" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\002flyout\shell\001" /v "SeparatorBefore" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\002flyout\shell\001" /v "SeparatorAfter" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\002flyout\shell\001" /v "CommandFlags" /t REG_DWORD /d "64" /f
Reg.exe add "%_regkey1%\shell\002flyout\shell\001\command" /ve /t REG_SZ /d "explorer windowsdefender://threat" /f
Reg.exe add "%_regkey1%\shell\002flyout\shell\002" /v "MUIVerb" /t REG_SZ /d "启用实时防护和防篡改" /f
Reg.exe add "%_regkey1%\shell\002flyout\shell\002" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\002flyout\shell\002\command" /ve /t REG_SZ /d "%_cmd_cmd_enable%" /f
Reg.exe add "%_regkey1%\shell\002flyout\shell\003" /v "MUIVerb" /t REG_SZ /d "禁用实时防护和防篡改" /f
Reg.exe add "%_regkey1%\shell\002flyout\shell\003" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\002flyout\shell\003\command" /ve /t REG_SZ /d "%_cmd_cmd_disabled%" /f
Reg.exe add "%_regkey1%\shell\003flyout" /v "MUIVerb" /t REG_SZ /d "&账户保护" /f
Reg.exe add "%_regkey1%\shell\003flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\003flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://account" /f
Reg.exe add "%_regkey1%\shell\004flyout" /v "MUIVerb" /t REG_SZ /d "&防火墙和网络保护" /f
Reg.exe add "%_regkey1%\shell\004flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\004flyout" /v "Position" /t REG_SZ /d "Bottom" /f
Reg.exe add "%_regkey1%\shell\004flyout" /v "SubCommands" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\004flyout\shell" /v "SubCommands" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\004flyout\shell\001" /v "MUIVerb" /t REG_SZ /d "防火墙和网络保护设置主页" /f
Reg.exe add "%_regkey1%\shell\004flyout\shell\001" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\004flyout\shell\001" /v "SeparatorBefore" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\004flyout\shell\001" /v "SeparatorAfter" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\004flyout\shell\001" /v "CommandFlags" /t REG_DWORD /d "64" /f
Reg.exe add "%_regkey1%\shell\004flyout\shell\001\command" /ve /t REG_SZ /d "explorer windowsdefender://network" /f
Reg.exe add "%_regkey1%\shell\004flyout\shell\002" /v "MUIVerb" /t REG_SZ /d "启用 Windows 防火墙" /f
Reg.exe add "%_regkey1%\shell\004flyout\shell\002" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\004flyout\shell\002\command" /ve /t REG_SZ /d "powershell.exe -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/s,/c,netsh advfirewall set allprofiles state on' -Verb runAs\"" /f
Reg.exe add "%_regkey1%\shell\004flyout\shell\003" /v "MUIVerb" /t REG_SZ /d "禁用 Windows 防火墙" /f
Reg.exe add "%_regkey1%\shell\004flyout\shell\003" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\004flyout\shell\003\command" /ve /t REG_SZ /d "powershell.exe -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/s,/c,netsh advfirewall set allprofiles state off' -Verb runAs\"" /f
Reg.exe add "%_regkey1%\shell\005flyout" /v "MUIVerb" /t REG_SZ /d "应用和浏览器控制" /f
Reg.exe add "%_regkey1%\shell\005flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\005flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://appbrowser" /f
Reg.exe add "%_regkey1%\shell\006flyout" /v "MUIVerb" /t REG_SZ /d "&设备安全性" /f
Reg.exe add "%_regkey1%\shell\006flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\006flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://devicesecurity" /f
Reg.exe add "%_regkey1%\shell\007flyout" /v "MUIVerb" /t REG_SZ /d "&设备性能和运行状况" /f
Reg.exe add "%_regkey1%\shell\007flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\007flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://perfhealth" /f
Reg.exe add "%_regkey1%\shell\008flyout" /v "MUIVerb" /t REG_SZ /d "&家庭选项" /f
Reg.exe add "%_regkey1%\shell\008flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\008flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://family" /f
Reg.exe add "%_regkey1%\shell\009flyout" /v "MUIVerb" /t REG_SZ /d "&保护历史记录" /f
Reg.exe add "%_regkey1%\shell\009flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\009flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://history" /f
Reg.exe add "%_regkey1%\shell\010flyout" /v "MUIVerb" /t REG_SZ /d "&安全提供程序" /f
Reg.exe add "%_regkey1%\shell\010flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\010flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://providers" /f
Reg.exe add "%_regkey1%\shell\011flyout" /v "MUIVerb" /t REG_SZ /d "&通知" /f
Reg.exe add "%_regkey1%\shell\011flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%_regkey1%\shell\011flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://settings" /f
Rem Windows安全中心菜单总项
for %%k in ("%_regkey2%" "%_regkey3%" "%_regkey4%") do (
Reg.exe add %%k /v "Icon" /t REG_SZ /d "%ProgramFiles%\Windows Defender\EppManifest.dll,-100" /f
Reg.exe add %%k /v "MUIVerb" /t REG_SZ /d "Windows 安全中心" /f
Reg.exe add %%k /v "Position" /t REG_SZ /d "Bottom" /f
Reg.exe add %%k /v "SeparatorAfter" /t REG_SZ /d "" /f
Reg.exe add %%k /v "SeparatorBefore" /t REG_SZ /d "" /f
Reg.exe add %%k /v "SubCommands" /t REG_SZ /d "" /f
)
Rem 二级菜单安全中心主页
for %%k in ("%_regkey2%" "%_regkey3%" "%_regkey4%") do (
Reg.exe add "%%k\shell\001flyout" /v "Icon" /t REG_SZ /d "%ProgramFiles%\Windows Defender\EppManifest.dll,-100" /f
Reg.exe add "%%k\shell\001flyout" /v "MUIVerb" /t REG_SZ /d "&安全中心主页" /f
Reg.exe add "%%k\shell\001flyout" /v "SeparatorAfter" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\001flyout" /v "SeparatorBefore" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\001flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\001flyout" /v "CommandFlags" /t REG_DWORD /d "64" /f
Reg.exe add "%%k\shell\001flyout\command" /ve /t REG_SZ /d "explorer windowsdefender:" /f
)
Rem 二级菜单病毒和威胁防护
for %%k in ("%_regkey2%" "%_regkey3%" "%_regkey4%") do (
Reg.exe add "%%k\shell\002flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\002flyout" /v "MUIVerb" /t REG_SZ /d "&病毒和威胁防护" /f
Reg.exe add "%%k\shell\002flyout" /v "Position" /t REG_SZ /d "Bottom" /f
Reg.exe add "%%k\shell\002flyout" /v "SubCommands" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\002flyout\shell" /v "SubCommands" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\002flyout\shell\001" /v "MUIVerb" /t REG_SZ /d "病毒和威胁防护设置主页" /f
Reg.exe add "%%k\shell\002flyout\shell\001" /v "SeparatorAfter" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\002flyout\shell\001" /v "SeparatorBefore" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\002flyout\shell\001" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\002flyout\shell\001" /v "CommandFlags" /t REG_DWORD /d "64" /f
Reg.exe add "%%k\shell\002flyout\shell\001\command" /ve /t REG_SZ /d "explorer windowsdefender://threat" /f
Reg.exe add "%%k\shell\002flyout\shell\002" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\002flyout\shell\002" /v "MUIVerb" /t REG_SZ /d "启用实时防护和防篡改" /f
Reg.exe add "%%k\shell\002flyout\shell\002\command" /ve /t REG_SZ /d "%_cmd_cmd_enable%" /f
Reg.exe add "%%k\shell\002flyout\shell\003" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\002flyout\shell\003" /v "MUIVerb" /t REG_SZ /d "禁用实时防护和防篡改" /f
Reg.exe add "%%k\shell\002flyout\shell\003\command" /ve /t REG_SZ /d "%_cmd_cmd_disabled%" /f
)
Rem 二级菜单账户保护
for %%k in ("%_regkey2%" "%_regkey3%" "%_regkey4%") do (
Reg.exe add "%%k\shell\003flyout" /v "MUIVerb" /t REG_SZ /d "&账户保护" /f
Reg.exe add "%%k\shell\003flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\003flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://account" /f
)
Rem 二级菜单防火墙和网络保护
for %%k in ("%_regkey2%" "%_regkey3%" "%_regkey4%") do (
Reg.exe add "%%k\shell\004flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\004flyout" /v "MUIVerb" /t REG_SZ /d "&防火墙和网络保护" /f
Reg.exe add "%%k\shell\004flyout" /v "Position" /t REG_SZ /d "Bottom" /f
Reg.exe add "%%k\shell\004flyout" /v "SubCommands" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\004flyout\shell" /v "SubCommands" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\004flyout\shell\001" /v "MUIVerb" /t REG_SZ /d "防火墙和网络保护设置主页" /f
Reg.exe add "%%k\shell\004flyout\shell\001" /v "SeparatorAfter" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\004flyout\shell\001" /v "SeparatorBefore" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\004flyout\shell\001" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\004flyout\shell\001" /v "CommandFlags" /t REG_DWORD /d "64" /f
Reg.exe add "%%k\shell\004flyout\shell\001\command" /ve /t REG_SZ /d "explorer windowsdefender://network" /f
Reg.exe add "%%k\shell\004flyout\shell\002" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\004flyout\shell\002" /v "MUIVerb" /t REG_SZ /d "启用 Windows 防火墙" /f
Reg.exe add "%%k\shell\004flyout\shell\002\command" /ve /t REG_SZ /d "powershell.exe -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/s,/c,netsh advfirewall set allprofiles state on' -Verb runAs\"" /f
Reg.exe add "%%k\shell\004flyout\shell\003" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\004flyout\shell\003" /v "MUIVerb" /t REG_SZ /d "禁用 Windows 防火墙" /f
Reg.exe add "%%k\shell\004flyout\shell\003\command" /ve /t REG_SZ /d "powershell.exe -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/s,/c,netsh advfirewall set allprofiles state off' -Verb runAs\"" /f
)
Rem 二级菜单应用和浏览器控制
for %%k in ("%_regkey2%" "%_regkey3%" "%_regkey4%") do (
Reg.exe add "%%k\shell\005flyout" /v "MUIVerb" /t REG_SZ /d "&应用和浏览器控制" /f
Reg.exe add "%%k\shell\005flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\005flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://appbrowser" /f
)
Rem 二级菜单设备安全性
for %%k in ("%_regkey2%" "%_regkey3%" "%_regkey4%") do (
Reg.exe add "%%k\shell\006flyout" /v "MUIVerb" /t REG_SZ /d "&设备安全性" /f
Reg.exe add "%%k\shell\006flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\006flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://devicesecurity" /f
)
Rem 二级菜单设备性能和运行状况
for %%k in ("%_regkey2%" "%_regkey3%" "%_regkey4%") do (
Reg.exe add "%%k\shell\007flyout" /v "MUIVerb" /t REG_SZ /d "&设备性能和运行状况" /f
Reg.exe add "%%k\shell\007flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\007flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://perfhealth" /f
)
Rem 二级菜单家庭选项
for %%k in ("%_regkey2%" "%_regkey3%" "%_regkey4%") do (
Reg.exe add "%%k\shell\008flyout" /v "MUIVerb" /t REG_SZ /d "&家庭选项" /f
Reg.exe add "%%k\shell\008flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\008flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://family" /f
)
Rem 二级菜单保护历史记录
for %%k in ("%_regkey2%" "%_regkey3%" "%_regkey4%") do (
Reg.exe add "%%k\shell\009flyout" /v "MUIVerb" /t REG_SZ /d "&保护历史记录" /f
Reg.exe add "%%k\shell\009flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\009flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://history" /f
)
Rem 二级菜单安全提供程序
for %%k in ("%_regkey2%" "%_regkey3%" "%_regkey4%") do (
Reg.exe add "%%k\shell\010flyout" /v "MUIVerb" /t REG_SZ /d "&安全提供程序" /f
Reg.exe add "%%k\shell\010flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\010flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://providers" /f
)
Rem 二级菜单通知
for %%k in ("%_regkey2%" "%_regkey3%" "%_regkey4%") do (
Reg.exe add "%%k\shell\011flyout" /v "MUIVerb" /t REG_SZ /d "&通知" /f
Reg.exe add "%%k\shell\011flyout" /v "HasLUAShield" /t REG_SZ /d "" /f
Reg.exe add "%%k\shell\011flyout\command" /ve /t REG_SZ /d "explorer windowsdefender://settings" /f
)
REM 添加排除WinDefCtl件夹限制访问及白名单
powershell -ExecutionPolicy Bypass -NoProfile -Command "Add-MpPreference -ExclusionProcess '%~dp0WinDefCtl.exe'"
powershell -ExecutionPolicy Bypass -NoProfile -Command "Add-MpPreference -ControlledFolderAccessAllowedApplications '%ComSpec%'"
powershell -ExecutionPolicy Bypass -NoProfile -Command "Add-MpPreference -ControlledFolderAccessAllowedApplications 'C:\Windows\System32\cmd.exe'"
powershell -ExecutionPolicy Bypass -NoProfile -Command "Add-MpPreference -ControlledFolderAccessAllowedApplications '%~dp0WinDefCtl.exe'"
exit
:uninstall
REM 删除残留注册项
reg delete "%_regkey1%" /f
for %%i in ("%_regkey2%" "%_regkey3%" "%_regkey4%" "%_regkey5%") do reg delete %%i /f
REM 移除排除WinDefCtl文件夹限制访问及白名单
powershell -ExecutionPolicy Bypass -NoProfile -Command "Remove-MpPreference -ExclusionProcess '%~dp0WinDefCtl.exe'"
powershell -ExecutionPolicy Bypass -NoProfile -Command "Remove-MpPreference -ControlledFolderAccessAllowedApplications '%ComSpec%'"
powershell -ExecutionPolicy Bypass -NoProfile -Command "Remove-MpPreference -ControlledFolderAccessAllowedApplications 'C:\Windows\System32\cmd.exe'"
powershell -ExecutionPolicy Bypass -NoProfile -Command "Remove-MpPreference -ControlledFolderAccessAllowedApplications '%~dp0WinDefCtl.exe'"
exit
:OUT
exit

复制代码

网盘下载自解压包 WinDefCtl 整合右键菜单自解压版https://cloud.189.cn/t/qUf6va6n6N3q（访问码：df2a）

geshenggang4 · 发表于 2025-12-13 16:44:51

感谢分享！

handsome_xiang · 发表于 2025-12-13 16:55:02

感谢分享！

smile_z · 发表于 2025-12-13 17:00:14

感谢分享

canghaisui · 发表于 2025-12-13 17:09:42

谢谢大佬分享

xiaozgl119 · 发表于 2025-12-13 17:16:37

感谢分享

pole87898843 · 发表于 2025-12-13 17:27:12

感谢分享

yyz2191958 · 发表于 2025-12-13 17:50:38

这个强大

womwom · 发表于 2025-12-13 18:06:00

感谢分享

bnsyy · 发表于 2025-12-13 18:07:57

感谢分享！

hmaaaa · 发表于 2025-12-13 18:08:15

感謝大大分享!^^ 辛苦了！

nie956 · 发表于 2025-12-13 18:41:48

这个好，感谢分享

lyrgcy · 发表于 2025-12-13 18:44:10

感谢分享，收下了

it323 · 发表于 2025-12-13 19:16:03

感谢分享！

yuaijueyuan · 发表于 2025-12-13 20:06:51

可以直接分析文件吗？复制出来的好像有中文符号

qq8899399 · 发表于 2025-12-13 20:13:44

yuaijueyuan 发表于 2025-12-13 20:06
可以直接分析文件吗？复制出来的好像有中文符号

我上传不了压缩文件。。。。。

yuaijueyuan · 发表于 2025-12-13 20:29:38

qq8899399 发表于 2025-12-13 20:13
我上传不了压缩文件。。。。。

上链接

qq8899399 · 发表于 2025-12-13 20:47:04

yuaijueyuan 发表于 2025-12-13 20:29
上链接

https://cloud.189.cn/t/qUf6va6n6N3q（访问码：df2a）

zhtq · 发表于 2025-12-13 21:13:20

qq8899399 发表于 2025-12-13 20:47
https://cloud.189.cn/t/qUf6va6n6N3q（访问码：df2a）

好人

in9 · 发表于 2025-12-13 21:14:56

谢谢楼主分享，谢谢20楼朋友上传分享！

a66 · 发表于 2025-12-13 21:36:10

支持折腾~

番茄盖浇饭 · 发表于 2025-12-13 21:54:50

感谢您的分享！

Tatsumki · 发表于 2025-12-13 22:03:03

这个有点意思谢谢分享

2011yousu · 发表于 2025-12-13 22:43:10

有能卸载小娜的吗

ynb168c · 发表于 2025-12-13 22:49:41

感谢分享

1801403 · 发表于 2025-12-14 00:58:09

原版系统很有用的。

2011freefly · 发表于 2025-12-14 02:46:12

谢谢分享，哪位能不能分享到其它不用登录的网盘？

ebaqiang · 发表于 2025-12-14 06:44:28

这个好，感谢分享

win98se · 发表于 2025-12-14 08:03:39

感谢分享

http88 · 发表于 2025-12-14 08:13:54

谢谢分享，下载备用。

		自动登录	找回密码
密码			注册

[分享] 一个安全中心的右键菜单（能实时开启和关闭 Win defender实时防护和防篡改）

点评

点评

点评

[分享] 一个 安全中心的 右键菜单（能实时开启和关闭 Win defender实时防护和防篡改）

点评

点评

点评

[分享] 一个安全中心的右键菜单（能实时开启和关闭 Win defender实时防护和防篡改）