Malware Analysis Report

2024-12-07 16:48

Sample ID 241113-jjncya1kep
Target 2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca
SHA256 2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca
Tags
defense_evasion discovery evasion execution
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca

Threat Level: Likely malicious

The file 2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca was found to be: Likely malicious.

Malicious Activity Summary

defense_evasion discovery evasion execution

Stops running service(s)

Executes dropped EXE

Modifies file permissions

Checks computer location settings

Loads dropped DLL

Indicator Removal: File Deletion

Enumerates connected drives

Launches sc.exe

System Location Discovery: System Language Discovery

Enumerates physical storage devices

Program crash

Suspicious use of WriteProcessMemory

Suspicious use of SetWindowsHookEx

Suspicious behavior: EnumeratesProcesses

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-13 07:42

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-13 07:42

Reported

2024-11-13 07:44

Platform

win7-20240903-en

Max time kernel

121s

Max time network

123s

Command Line

"C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe"

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe N/A

Indicator Removal: File Deletion

defense_evasion

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1548 wrote to memory of 2840 N/A C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe C:\Windows\SysWOW64\cmd.exe
PID 1548 wrote to memory of 2840 N/A C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe C:\Windows\SysWOW64\cmd.exe
PID 1548 wrote to memory of 2840 N/A C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe C:\Windows\SysWOW64\cmd.exe
PID 1548 wrote to memory of 2840 N/A C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe C:\Windows\SysWOW64\cmd.exe
PID 1548 wrote to memory of 2536 N/A C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe
PID 1548 wrote to memory of 2536 N/A C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe
PID 1548 wrote to memory of 2536 N/A C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe
PID 1548 wrote to memory of 2536 N/A C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe
PID 2536 wrote to memory of 2600 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2600 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2600 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2600 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2644 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2644 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2644 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2644 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2852 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2852 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2852 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2852 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2356 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2356 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2356 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2356 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2928 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2928 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2928 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 2928 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 1108 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 1108 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 1108 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 1108 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 844 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 844 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 844 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe
PID 2536 wrote to memory of 844 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\system32\cmd.exe

Processes

C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe

"C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe"

C:\Windows\SysWOW64\cmd.exe

cmd /C rmdir C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool /s /q

C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe

"C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe"

C:\Windows\system32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\system32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\system32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\system32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\system32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\system32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\system32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

Network

N/A

Files

\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe

MD5 a39f7b36f4e920e64b14b0dbbcd24dff
SHA1 99fca1a126a74920cf20245f05a745a79aaf8cc6
SHA256 5bd46bc5f354652ec50711eef78f0ad25bb448ada1b60e1d39408b96ce256884
SHA512 ce6257d50e05739c60994d5e0f829dbec87d0f2015306ec984950f4dee2ed8163ad6b25a4ecfcb8580b6577078b5a9184af28c7d659dbe3bbbdb42e7dd6513e9

C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\mfc100u.dll

MD5 f841f32ad816dbf130f10d86fab99b1a
SHA1 0f8b90814b33275cf39f95e769927497da9460bf
SHA256 7a4cfbce1eb48d4f8988212c2e338d7781b9894ef0f525e871c22bb730a74f3e
SHA512 6222f16722a61ee6950b6fbcbe46c2b08e2394ce3dd32d34656faf2719e190e66b4e59617c83f117ad3793b1292a107f275087b037cf1b6e4d9819323748079a

C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\MSVCR100.dll

MD5 67ec459e42d3081dd8fd34356f7cafc1
SHA1 1738050616169d5b17b5adac3ff0370b8c642734
SHA256 1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067
SHA512 9ed1c106df217e0b4e4fbd1f4275486ceba1d8a225d6c7e47b854b0b5e6158135b81be926f51db0ad5c624f9bd1d09282332cf064680dc9f7d287073b9686d33

\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\msvcp100.dll

MD5 03e9314004f504a14a61c3d364b62f66
SHA1 0aa3caac24fdf9d9d4c618e2bbf0a063036cd55d
SHA256 a3ba6421991241bea9c8334b62c3088f8f131ab906c3cc52113945d05016a35f
SHA512 2fcff4439d2759d93c57d49b24f28ae89b7698e284e76ac65fe2b50bdefc23a8cc3c83891d671de4e4c0f036cef810856de79ac2b028aa89a895bf35abff8c8d

Analysis: behavioral2

Detonation Overview

Submitted

2024-11-13 07:42

Reported

2024-11-13 07:44

Platform

win10v2004-20241007-en

Max time kernel

150s

Max time network

142s

Command Line

"C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe"

Signatures

Stops running service(s)

evasion execution

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe N/A

Modifies file permissions

discovery
Description Indicator Process Target
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\icacls.exe N/A

Indicator Removal: File Deletion

defense_evasion

Launches sc.exe

Description Indicator Process Target
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3744 wrote to memory of 1636 N/A C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe C:\Windows\SysWOW64\cmd.exe
PID 3744 wrote to memory of 1636 N/A C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe C:\Windows\SysWOW64\cmd.exe
PID 3744 wrote to memory of 1636 N/A C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe C:\Windows\SysWOW64\cmd.exe
PID 3744 wrote to memory of 3720 N/A C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe
PID 3744 wrote to memory of 3720 N/A C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe
PID 3744 wrote to memory of 3720 N/A C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe
PID 3720 wrote to memory of 1920 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\SYSTEM32\cmd.exe
PID 3720 wrote to memory of 1920 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\SYSTEM32\cmd.exe
PID 3720 wrote to memory of 2136 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\SYSTEM32\cmd.exe
PID 3720 wrote to memory of 2136 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\SYSTEM32\cmd.exe
PID 3720 wrote to memory of 3268 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\SYSTEM32\cmd.exe
PID 3720 wrote to memory of 3268 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\SYSTEM32\cmd.exe
PID 3720 wrote to memory of 2300 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\SYSTEM32\cmd.exe
PID 3720 wrote to memory of 2300 N/A C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe C:\Windows\SYSTEM32\cmd.exe
PID 3268 wrote to memory of 1868 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 1868 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 2908 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 2908 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 4752 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 4752 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 4844 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 4844 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 3528 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 3528 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3580 wrote to memory of 3992 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\icacls.exe
PID 3580 wrote to memory of 3992 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\icacls.exe
PID 2300 wrote to memory of 1040 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 1040 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 2744 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 2744 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 208 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 208 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 3692 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 3692 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 2200 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 2200 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 3068 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 3068 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 1084 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 1084 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 5028 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 5028 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 4432 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 4432 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 824 wrote to memory of 2776 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\icacls.exe
PID 824 wrote to memory of 2776 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\icacls.exe
PID 3268 wrote to memory of 3196 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 3196 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 2948 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 2948 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 1136 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 1136 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 112 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 112 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 4648 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 4648 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 4080 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 2300 wrote to memory of 4080 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 4988 wrote to memory of 2100 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\icacls.exe
PID 4988 wrote to memory of 2100 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\icacls.exe
PID 3268 wrote to memory of 2688 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 2688 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 4348 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe
PID 3268 wrote to memory of 4348 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\sc.exe

Processes

C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe

"C:\Users\Admin\AppData\Local\Temp\2288a24ade3645329738651abb4dea6d5daea2b0db25481a5ebb2a6ae46ce5ca.exe"

C:\Windows\SysWOW64\cmd.exe

cmd /C rmdir C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool /s /q

C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe

"C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3720 -ip 3720

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3720 -s 640

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d C:\Windows\System32 & dir smartscreen.exe

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & CloseDefenderSartScreen.bat

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:e

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rx"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:d"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /inheritance:d

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g administrators"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /inheritance:e"

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g administrators

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:d users"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:d users

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r system:rd"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r system:rd

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /remove:g \"NT AUTHORITY\SYSTEM\"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /remove:g "NT AUTHORITY\SYSTEM"

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "C:\Windows\servicing\TrustedInstaller.exe"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe"

C:\Windows\SYSTEM32\cmd.exe

cmd /C cd /d "C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool" & OpenDefenderSartScreen.bat

C:\Windows\system32\sc.exe

sc stop trustedinstaller

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r users:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r users:rx

C:\Windows\system32\sc.exe

sc config trustedinstaller binpath= "cmd.exe /c icacls \"C:\Windows\System32\smartscreen.exe\" /grant:r administrators:rx"

C:\Windows\system32\sc.exe

sc start trustedinstaller

C:\Windows\system32\cmd.exe

cmd.exe /c icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

C:\Windows\system32\icacls.exe

icacls "C:\Windows\System32\smartscreen.exe" /grant:r administrators:rx

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 73.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 8.8.8.8:53 56.163.245.4.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 8.8.8.8:53 75.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 83.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp

Files

C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\QuickFixDefenderSmartScreenDisableTool.exe

MD5 a39f7b36f4e920e64b14b0dbbcd24dff
SHA1 99fca1a126a74920cf20245f05a745a79aaf8cc6
SHA256 5bd46bc5f354652ec50711eef78f0ad25bb448ada1b60e1d39408b96ce256884
SHA512 ce6257d50e05739c60994d5e0f829dbec87d0f2015306ec984950f4dee2ed8163ad6b25a4ecfcb8580b6577078b5a9184af28c7d659dbe3bbbdb42e7dd6513e9

C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\mfc100u.dll

MD5 f841f32ad816dbf130f10d86fab99b1a
SHA1 0f8b90814b33275cf39f95e769927497da9460bf
SHA256 7a4cfbce1eb48d4f8988212c2e338d7781b9894ef0f525e871c22bb730a74f3e
SHA512 6222f16722a61ee6950b6fbcbe46c2b08e2394ce3dd32d34656faf2719e190e66b4e59617c83f117ad3793b1292a107f275087b037cf1b6e4d9819323748079a

C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\MSVCR100.dll

MD5 67ec459e42d3081dd8fd34356f7cafc1
SHA1 1738050616169d5b17b5adac3ff0370b8c642734
SHA256 1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067
SHA512 9ed1c106df217e0b4e4fbd1f4275486ceba1d8a225d6c7e47b854b0b5e6158135b81be926f51db0ad5c624f9bd1d09282332cf064680dc9f7d287073b9686d33

C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\MSVCP100.dll

MD5 03e9314004f504a14a61c3d364b62f66
SHA1 0aa3caac24fdf9d9d4c618e2bbf0a063036cd55d
SHA256 a3ba6421991241bea9c8334b62c3088f8f131ab906c3cc52113945d05016a35f
SHA512 2fcff4439d2759d93c57d49b24f28ae89b7698e284e76ac65fe2b50bdefc23a8cc3c83891d671de4e4c0f036cef810856de79ac2b028aa89a895bf35abff8c8d

C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\LenovoFeedbackInformation.dll

MD5 cadfb35cc33df21f734b51e87caff759
SHA1 aa75a77d27b6f8bc3344b88cff7b9bc280c5ab52
SHA256 2344d0af4611897144ed4cfc01460ce35a709c5e8476388df0e794fd15ddb82e
SHA512 dfd5772102033fc10a969ed200b732f977795d9e72b5a78bd2e62defab7f1258747673bb860c49831797a66850040bce2f296f085d9727adbf1c5918020a87d6

C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\CloseDefenderSartScreen.bat

MD5 ada93add6e0f7d758e7741152574c042
SHA1 70270883e1e9209e9d0fdb735239de9d350307d5
SHA256 6252ffd4f4e54b3c3f6e2ccc04dd626e216b55ccef97daf937e09a00ced9f72b
SHA512 1997b34de933b1db35e29d314e448bbe172f6ce41cbcba3334bc520c4213e70e9cbd18da0d14cb7944bad85dd0e5dd50835c6273ff9c6da1d538430f830ad142

C:\LenovoQuickFix\QuickFixDefenderSmartScreenDisableTool\OpenDefenderSartScreen.bat

MD5 0831fc616e464cb7d9f01a90bbeeb532
SHA1 14d359f08050c1be002a89b5530ad089a3ffeed3
SHA256 156f1bb98cd92c04b655d9f0a0a09b562183000a58466adb31a0953f51960f87
SHA512 ccd2296cca1804bafb7e348f27e520f9cf7d8595bef187ac7bf36443736728f80f0e521a378fb4d80023f31068e5564eb6ec617ab913ac52e391407fa7d0cbf6

C:\ProgramData\CloseDefenderSartScreen.txt

MD5 df7b2b8f6f76bc7a1f3959c8dbf9f47a
SHA1 087c81724da14c27cec1a2466466082d82818c3c
SHA256 2e8b6c2074a77603892588857921ac6d949219336604f5e934cf9782ba01fdb6
SHA512 fb4e93ba1a6c348b7a5ee2aaea8e773765736422bb816c39f628fb525bfabfd7fa2c594e1d9ff1403615e40facb2bddd929ac0f4cdd4f81c9b2029ac1953a8e6