Microsoft is now using a Windows driverto prevent users from changing the default browser in Windows 10 and Windows 11 through software or by manually modifying the Registry.
See also: Safari: It becomes the second most popular desktop browser again
Windows users can still change their default browser through Windows Settings. However, those who used software to change their browser are now being blocked by a Windows driver that was silently introduced to users around the world as part of the February updates for Windows 10 (KB5034763) and Windows 11 (KB5034765).
Technology consultant Christoph Kolbiczwas the first to notice the change when his programs, SetUserFTA and SetDefaultBrowser, suddenly stopped working.
SetUserFTA is a command-line program that allows Windows administrators to change file associations through login scripts and other methods. SetDefaultBrowser works in a similar way, but is only used to change the default browser in Windows
Starting with Windows 8, Microsoft introduced a new system for associating file extensions and URL protocols with default programs to prevent them from being corrupted by malware and malicious scripts. This new system associates a file extension or URL protocol with a specially constructed hash stored in the UserChoice. If the correct hash is not used, Windows will ignore the registry values and use the default program for that URL protocol, which is Microsoft Edge.
See also: DuckDuckGo gets new Sync & Backup feature with end-to-end encryption
Kolbicz was modifying this hashing algorithm to create the SetUserFTA and SetDefaultBrowser programs, which change the default browsers.
However, with the February updates for Windows 10 and Windows 11 installed, Kolbicz noted that these Registry keys are now locked, causing errors when modified outside of Windows settings, and the new driver does not allow changing the browser.
After further research, Kolbicz discovered that Microsoft introduced a new Windows filter driver (c:\windows\system32\drivers\UCPD.sys) as part of the February updates.
This wizard is described as the “ User Choice Protection Wizard ” and, when loaded, prevents direct editing of Registry keys related to HTTP and HTTPS URL associations and .PDF file association .
See also: Microsoft Defender: No longer flags Tor Browser as malware
A web browser, or internet browser, is software that allows users to browse the internet. Its primary function is to read HTML, the markup language used to create web pages. The browser parses the HTML code and converts it into visually appealing web pages with text, images, and video. It may also support other technologies such as CSS and JavaScript, which allow for the creation of interactive elements and customization of the appearance of web pages. In addition to viewing web pages, browsers also have features such as the ability to store bookmarks, manage user accounts, track browsing history, and offer secure browsing through data encryption.
Source: bleepingcomputer
