{"id":19527818,"url":"https://github.com/valinet/vbspolicydisabledefi","last_synced_at":"2026-03-16T23:35:44.336Z","repository":{"id":251274218,"uuid":"836920674","full_name":"valinet/VbsPolicyDisabledEFI","owner":"valinet","description":"EFI driver which disables Virtualization-based Security (VBS) in Microsoft Windows","archived":false,"fork":false,"pushed_at":"2024-08-01T20:59:22.000Z","size":5,"stargazers_count":11,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-01-08T16:03:21.116Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/valinet.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-08-01T20:52:19.000Z","updated_at":"2024-12-24T03:19:02.000Z","dependencies_parsed_at":"2024-08-01T23:24:06.766Z","dependency_job_id":null,"html_url":"https://github.com/valinet/VbsPolicyDisabledEFI","commit_stats":null,"previous_names":["valinet/vbspolicydisabledefi"],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/valinet%2FVbsPolicyDisabledEFI","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/valinet%2FVbsPolicyDisabledEFI/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/valinet%2FVbsPolicyDisabledEFI/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/valinet%2FVbsPolicyDisabledEFI/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/valinet","download_url":"https://codeload.github.com/valinet/VbsPolicyDisabledEFI/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":240779439,"owners_count":19856184,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-11T01:16:29.465Z","updated_at":"2026-03-16T23:35:44.293Z","avatar_url":"https://github.com/valinet.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# VbsPolicyDisabledEFI\nEFI driver which disables Virtualization-based Security (VBS) in Microsoft Windows.\n\n## Installation\n\n1. Download `EfiGuardDxe.efi` and `Shell_EA4BB293-2D7F-4456-A681-1F22F42CD0BC.efi` from [Releases](https://github.com/valinet/VbsPolicyDisableEFI/releases/).\n\n2. Open administrative command window.\n\n3. Mount EFI partition: `mountvol S: /s`.\n\n4. Copy `EfiGuardDxe.efi` to `S:\\EFI\\Boot\\EfiGuardDxe.efi`: `copy /Y C:\\Users\\%USERNAME%\\Downloads\\EfiGuardDxe.efi S:\\EFI\\Boot\\EfiGuardDxe.efi`.\n\n5. Reboot PC and start the UEFI Shell (`Shell_EA4BB293-2D7F-4456-A681-1F22F42CD0BC.efi`) EFI application. The easiest and most universal solution for doing so is to prepare a USB drive using [ventoy](https://ventoy.net/en/index.html), place the EFI files on it and finally boot it - it will find the EFI applications and allow you to launch them.\n\n6. In UEFI Shell, identify and switch to EFI partition. To do so, start by typing `fs0:`, then Enter, then `dir` and check whether the displayed files match the expectations for an EFI partition. If not, type `fs1:`, repeat, and so on until you find the EFI partition.\n\n7. Install the driver: `cd EFI\\Boot`, then `bcfg driver add 0 EfiGuardDxe.efi \"EfiGuardDxe\"`.\n\n8. Reboot into Windows. Confirm Virtualization-based Security is disabled by looking into `msinfo32` at the bottom - it should state `Not enabled`.\n\n## Compilation\n\nThe driver is actually a patch for [EfiGuard](https://github.com/Mattiwatti/EfiGuard) which disables all functionality but the VBS disable code (EfiGuard disables VBS besides performing a whole bunch of other things).\n\nTo compile, you need to have a working [edk2](https://github.com/tianocore/edk2) build environment. The best guide that I found for setting up the build environment is this [YouTube video](https://www.youtube.com/watch?v=jrY4oqgHV0o). I recommend installing `edk2` in `C:\\edk2`, and `nasm` in `C:\\NASM`.\n\nWhen you test compile `MdeModulePkg`, if you encounter `error 7000: Failed to execute command` and/or `error LNK2001: unresolved external symbol memcpy`, you can fix it to build completely by applying [this patch](https://github.com/tianocore/edk2/commit/73978992d8ea87bed822439a8993894d5604e9c9.patch).\n\nMy `Conf\\target.txt` settings for all builds are:\n\n```\nTARGET                = RELEASE\nTARGET_ARCH           = X64\nTOOL_CHAIN_TAG        = VS2019\n```\n\nMake sure to run all commands in a `x86 Native Tools Command Prompt for VS 2022` window.\n\nFor building each of the projects, simply write the desired `ACTIVE_PLATFORM` one at a time in `Conf\\target.txt` and then issue the following commands: `edksetup.bat` and `build`.\n\n```\nACTIVE_PLATFORM       = MdeModulePkg/MdeModulePkg.dsc\nACTIVE_PLATFORM       = ShellPkg/ShellPkg.dsc\nACTIVE_PLATFORM       = EfiGuardPkg/EfiGuardPkg.dsc\n```\n\nWhen building `EfiGuardPkg`, first make sure to clone it in the correct folder - go to `edk2` folder and issue this command:\n\n```\ngit clone --recursive https://github.com/Mattiwatti/EfiGuard EfiGuardPkg\n```\n\nThen, do not forget to apply the `VbsPolicyDisabledEFI.patch` patch from this repo BEFORE issuing the `edksetup.bat` and `build` commands.\n\nThe resulting file should be called placed in `C:\\edk2\\Build\\EfiGuard\\RELEASE_VS2019\\X64\\EfiGuardDxe.efi`.\n\nIf you need to sign this file with your own certificate (useful when running with Secure Boot enabled), use this command:\n\n```\nsigntool.exe sign /fd sha256 /ac PATH_TO_DER /f PATH_TO_PFX /p CERT_PASSWORD /tr http://sha256timestamp.ws.symantec.com/sha256/timestamp /td SHA256 /sha1 SHA1_OF_CERTIFICATE \"C:\\edk2\\Build\\EfiGuard\\RELEASE_VS2019\\X64\\EfiGuardDxe.efi\"\n```\n\n## References\n\nhttps://www.basicinputoutput.com/2019/10/hello-world-quick-start-with-edk2.html\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fvalinet%2Fvbspolicydisabledefi","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fvalinet%2Fvbspolicydisabledefi","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fvalinet%2Fvbspolicydisabledefi/lists"}