How to turn windows updates back on?

[Toxenskiy]

the uninstaller does not solve this problem

[UnamSanctam]

You probably can't (in any easy way), hence the warning https://github.com/UnamSanctam/SilentCryptoMiner/wiki#disable-windows-update and its text being red.

[Toxenskiy]

do you have any uac bypass code

[UnamSanctam]

There's many different ones here: https://github.com/hfiref0x/UACME which also says in what Windows versions they work from and if they are fixed or not. Then there are better private methods of course but you can't find those online (for free or without connections).

[Toxenskiy]

I saw this repository, but I don't know how I can combine it with the miner

[UnamSanctam]

If you want to include it directly in the miner then you'll have to find the code for whatever UAC bypass you want and then rewrite it in C# and implement it into the miner or implement it directly into the shellcode loader. Someone has also rewritten some of them into C# here: https://github.com/FatRodzianko/SharpBypassUAC but I don't know if those are fixed or not.

[Toxenskiy]

Is it possible that the process will start, but Windows Defender will delete the original file, as a result of which the miner will not be able to copy itself?

[UnamSanctam]

Yes, though that hasn't really happened to me before (with "Add Defender Exclusions" enabled).