# the1812/malware-patch

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/the1812-malware-patch).**

5,466 stars · 333 forks · C# · MIT

## Links

- GitHub: https://github.com/the1812/Malware-Patch
- awesome-repositories: https://awesome-repositories.com/repository/the1812-malware-patch.md

## Topics

`csharp` `malware-protection` `uac-authorization` `windows` `wpf`

## Description

Malware-Patch is a collection of administrative utilities and controllers designed to manage software permissions and prevent unauthorized privilege elevation within Windows system settings. It functions as a UAC policy configuration tool and administrative access controller that blocks specific software from gaining administrator privileges.

The project employs a stateless permission management approach, meaning it enforces authorization blocks without requiring a persistent background service process. It achieves this by using digital signature filtering to match certificates of signed binaries against restricted lists and by modifying system registry keys to alter how User Account Control elevation requests are handled.

The software provides a command-line interface for configuring software permissions, administrator privileges, and file paths. These tools are used for Windows system hardening, focusing on administrative access control and the blocking of unauthorized authorization requests.

## Tags

### Security & Cryptography

- [UAC Configuration Tools](https://awesome-repositories.com/f/security-cryptography/uac-security-analysis/uac-configuration-tools.md) — Acts as a command-line utility for managing UAC policies to prevent unauthorized privilege elevation.
- [Administrative Access Control](https://awesome-repositories.com/f/security-cryptography/administrative-access-control.md) — Restricts digitally signed software from performing system-level operations to ensure only trusted applications have administrative access.
- [Binary Access Controllers](https://awesome-repositories.com/f/security-cryptography/administrative-access-control/binary-access-controllers.md) — Restricts digitally signed applications from gaining administrator privileges without requiring background processes.
- [Administrative Privilege Management](https://awesome-repositories.com/f/security-cryptography/administrative-privilege-management.md) — Provides a command-line utility to configure and manage elevated software permissions and administrator privileges. ([source](https://github.com/the1812/malware-patch#readme))
- [UAC Request Controllers](https://awesome-repositories.com/f/security-cryptography/administrative-privilege-management/uac-request-controllers.md) — Controls which applications can request administrator privileges through User Account Control to prevent unauthorized system changes.
- [Binary Certificate Filters](https://awesome-repositories.com/f/security-cryptography/digital-signature-validators/binary-certificate-filters.md) — Implements digital signature filtering to block administrative privileges by matching binary certificates against restricted lists.
- [Privilege Elevation Blocking](https://awesome-repositories.com/f/security-cryptography/malware-protection/privilege-elevation-blocking.md) — Stops malicious or unwanted software from gaining administrative access by restricting their ability to trigger UAC prompts.
- [Stateless Permission Blocks](https://awesome-repositories.com/f/security-cryptography/process-permission-management/stateless-permission-blocks.md) — Applies authorization blocks directly to system configuration without requiring a persistent background service process.
- [Windows Security Hardening](https://awesome-repositories.com/f/security-cryptography/windows-security-hardening.md) — Reduces the attack surface of Windows by limiting the execution of high-privilege processes.

### Operating Systems & Systems Programming

- [Registry Policy Enforcements](https://awesome-repositories.com/f/operating-systems-systems-programming/registry-policy-enforcements.md) — Modifies system registry keys to alter how Windows handles User Account Control elevation requests.

### Development Tools & Productivity

- [Command Line Interfaces](https://awesome-repositories.com/f/development-tools-productivity/command-line-interfaces.md) — Provides a terminal-based utility for programmatically updating security policies and managing permissions.