acronis-disable-active-protection.cmd

@ECHO OFF
::
:: Acronis True Image disabling malware protection.
::
:: Review 2022-10-02
::
:: Check if we are an administrator. If not, exit immediately.
:: BatchGotAdmin
:: Check for permissions
if "%PROCESSOR_ARCHITECTURE%" equ "amd64" (
    >nul 2>&1 "%SYSTEMROOT%\SysWOW64\cacls.exe" "%SYSTEMROOT%\SysWOW64\config\system"
) else (
    >nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"
)

:: If the error flag set, we do not have admin rights.
if %ERRORLEVEL% neq 0 (
    echo Requesting administrative privileges...
    goto UACPrompt
) else (
    goto gotAdmin
)

:UACPrompt
echo Set UAC = CreateObject^("Shell.Application"^) > "%TEMP%\getadmin.vbs"
set params= %*
echo UAC.ShellExecute "cmd.exe", "/c ""%~s0"" %params:"=""%", "", "runas", 1 >> "%TEMP%\getadmin.vbs"

wscript.exe "%TEMP%\getadmin.vbs"
del "%TEMP%\getadmin.vbs"
exit /b

:gotAdmin
cd /d "%~dp0"

:RMFLS

ren "%CommonProgramFiles(x86)%\Acronis\ActiveProtection\anti_ransomware_service.exe" "anti_ransomware_service.ex_"
ren "%ProgramFiles%\Acronis\CyberProtect\cyber-protect-service.exe" "cyber-protect-service.ex_"
ren "%ProgramFiles(x86)%\Acronis\Agent\bin\adp-agent.exe" "adp-agent.ex_"
ren "%ProgramFiles(x86)%\Acronis\Agent\bin\adp-rest-util.exe" "adp-rest-util.ex_"

:: sc config "AcronisActiveProtectionService" start= disabled
:: sc config "AcronisCyberProtectionService" start= disabled
sc stop bddci
sc delete bddci
sc stop ngscan
sc delete ngscan
sc stop AcronisCyberProtectionService
sc delete AcronisCyberProtectionService
sc stop AcronisActiveProtectionService
sc delete AcronisActiveProtectionService
::reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AcronisCyberProtectionService" /f
::reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AcronisActiveProtectionService" /f
::reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bddci" /f
::reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ngscan" /f
@PAUSE