From c817ae8bd984a5db42006ca16a0e68d9020db3c6 Mon Sep 17 00:00:00 2001 From: WindowsAddict Date: Wed, 2 Jul 2025 23:46:34 +0530 Subject: [PATCH] Add detection for Microsoft Defender for Endpoint --- MAS/All-In-One-Version-KL/MAS_AIO.cmd | 4 ++++ MAS/Separate-Files-Version/Activators/HWID_Activation.cmd | 4 ++++ MAS/Separate-Files-Version/Activators/KMS38_Activation.cmd | 4 ++++ .../Activators/Ohook_Activation_AIO.cmd | 4 ++++ .../Activators/Online_KMS_Activation.cmd | 4 ++++ MAS/Separate-Files-Version/Activators/TSforge_Activation.cmd | 4 ++++ MAS/Separate-Files-Version/Change_Office_Edition.cmd | 4 ++++ MAS/Separate-Files-Version/Change_Windows_Edition.cmd | 4 ++++ MAS/Separate-Files-Version/Extract_OEM_Folder.cmd | 4 ++++ MAS/Separate-Files-Version/Troubleshoot.cmd | 4 ++++ 10 files changed, 40 insertions(+) diff --git a/MAS/All-In-One-Version-KL/MAS_AIO.cmd b/MAS/All-In-One-Version-KL/MAS_AIO.cmd index a7c96e2..d792170 100644 --- a/MAS/All-In-One-Version-KL/MAS_AIO.cmd +++ b/MAS/All-In-One-Version-KL/MAS_AIO.cmd @@ -260,6 +260,10 @@ echo PowerShell is not working properly. Aborting... if /i "!tstresult2!"=="FullLanguage" ( echo: echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted. +echo: +sc query sense | find /i "RUNNING" %nul% && ( +echo Installed Antivirus - Microsoft Defender for Endpoint +) cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}""" ) diff --git a/MAS/Separate-Files-Version/Activators/HWID_Activation.cmd b/MAS/Separate-Files-Version/Activators/HWID_Activation.cmd index 865dd2f..5f70d82 100644 --- a/MAS/Separate-Files-Version/Activators/HWID_Activation.cmd +++ b/MAS/Separate-Files-Version/Activators/HWID_Activation.cmd @@ -282,6 +282,10 @@ echo PowerShell is not working properly. Aborting... if /i "!tstresult2!"=="FullLanguage" ( echo: echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted. +echo: +sc query sense | find /i "RUNNING" %nul% && ( +echo Installed Antivirus - Microsoft Defender for Endpoint +) cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}""" ) diff --git a/MAS/Separate-Files-Version/Activators/KMS38_Activation.cmd b/MAS/Separate-Files-Version/Activators/KMS38_Activation.cmd index 134b388..7b2965a 100644 --- a/MAS/Separate-Files-Version/Activators/KMS38_Activation.cmd +++ b/MAS/Separate-Files-Version/Activators/KMS38_Activation.cmd @@ -285,6 +285,10 @@ echo PowerShell is not working properly. Aborting... if /i "!tstresult2!"=="FullLanguage" ( echo: echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted. +echo: +sc query sense | find /i "RUNNING" %nul% && ( +echo Installed Antivirus - Microsoft Defender for Endpoint +) cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}""" ) diff --git a/MAS/Separate-Files-Version/Activators/Ohook_Activation_AIO.cmd b/MAS/Separate-Files-Version/Activators/Ohook_Activation_AIO.cmd index 0142756..0d5e62f 100644 --- a/MAS/Separate-Files-Version/Activators/Ohook_Activation_AIO.cmd +++ b/MAS/Separate-Files-Version/Activators/Ohook_Activation_AIO.cmd @@ -290,6 +290,10 @@ echo PowerShell is not working properly. Aborting... if /i "!tstresult2!"=="FullLanguage" ( echo: echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted. +echo: +sc query sense | find /i "RUNNING" %nul% && ( +echo Installed Antivirus - Microsoft Defender for Endpoint +) cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}""" ) diff --git a/MAS/Separate-Files-Version/Activators/Online_KMS_Activation.cmd b/MAS/Separate-Files-Version/Activators/Online_KMS_Activation.cmd index 773115e..ae8808a 100644 --- a/MAS/Separate-Files-Version/Activators/Online_KMS_Activation.cmd +++ b/MAS/Separate-Files-Version/Activators/Online_KMS_Activation.cmd @@ -321,6 +321,10 @@ echo PowerShell is not working properly. Aborting... if /i "!tstresult2!"=="FullLanguage" ( echo: echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted. +echo: +sc query sense | find /i "RUNNING" %nul% && ( +echo Installed Antivirus - Microsoft Defender for Endpoint +) cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}""" ) diff --git a/MAS/Separate-Files-Version/Activators/TSforge_Activation.cmd b/MAS/Separate-Files-Version/Activators/TSforge_Activation.cmd index 35ae26f..fd9c444 100644 --- a/MAS/Separate-Files-Version/Activators/TSforge_Activation.cmd +++ b/MAS/Separate-Files-Version/Activators/TSforge_Activation.cmd @@ -348,6 +348,10 @@ echo PowerShell is not working properly. Aborting... if /i "!tstresult2!"=="FullLanguage" ( echo: echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted. +echo: +sc query sense | find /i "RUNNING" %nul% && ( +echo Installed Antivirus - Microsoft Defender for Endpoint +) cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}""" ) diff --git a/MAS/Separate-Files-Version/Change_Office_Edition.cmd b/MAS/Separate-Files-Version/Change_Office_Edition.cmd index 10a6b2f..88fc54f 100644 --- a/MAS/Separate-Files-Version/Change_Office_Edition.cmd +++ b/MAS/Separate-Files-Version/Change_Office_Edition.cmd @@ -235,6 +235,10 @@ echo PowerShell is not working properly. Aborting... if /i "!tstresult2!"=="FullLanguage" ( echo: echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted. +echo: +sc query sense | find /i "RUNNING" %nul% && ( +echo Installed Antivirus - Microsoft Defender for Endpoint +) cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}""" ) diff --git a/MAS/Separate-Files-Version/Change_Windows_Edition.cmd b/MAS/Separate-Files-Version/Change_Windows_Edition.cmd index a89f448..05fae97 100644 --- a/MAS/Separate-Files-Version/Change_Windows_Edition.cmd +++ b/MAS/Separate-Files-Version/Change_Windows_Edition.cmd @@ -240,6 +240,10 @@ echo PowerShell is not working properly. Aborting... if /i "!tstresult2!"=="FullLanguage" ( echo: echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted. +echo: +sc query sense | find /i "RUNNING" %nul% && ( +echo Installed Antivirus - Microsoft Defender for Endpoint +) cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}""" ) diff --git a/MAS/Separate-Files-Version/Extract_OEM_Folder.cmd b/MAS/Separate-Files-Version/Extract_OEM_Folder.cmd index d13e77e..bcc3a78 100644 --- a/MAS/Separate-Files-Version/Extract_OEM_Folder.cmd +++ b/MAS/Separate-Files-Version/Extract_OEM_Folder.cmd @@ -251,6 +251,10 @@ echo PowerShell is not working properly. Aborting... if /i "!tstresult2!"=="FullLanguage" ( echo: echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted. +echo: +sc query sense | find /i "RUNNING" %nul% && ( +echo Installed Antivirus - Microsoft Defender for Endpoint +) cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}""" ) diff --git a/MAS/Separate-Files-Version/Troubleshoot.cmd b/MAS/Separate-Files-Version/Troubleshoot.cmd index 0064aa4..2989d4a 100644 --- a/MAS/Separate-Files-Version/Troubleshoot.cmd +++ b/MAS/Separate-Files-Version/Troubleshoot.cmd @@ -252,6 +252,10 @@ echo PowerShell is not working properly. Aborting... if /i "!tstresult2!"=="FullLanguage" ( echo: echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted. +echo: +sc query sense | find /i "RUNNING" %nul% && ( +echo Installed Antivirus - Microsoft Defender for Endpoint +) cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}""" )