IT-Consultant @axacomag (CCE-V, CCE-N, MCSE, VCP), interested in Reverse Engineering, Jailbreaking and #XMR. Developer of SetUserFTA. Owner of Kolbicz IT.

Joined August 2017
108 Photos and videos
Pinned Tweet
SetUserFTA has now its own domain and Twitter account. I will no longer use my blog to share information about SetUserFTA. Please follow @setuserfta on Twitter and visit the website at setuserfta.com

3
11
1,758
Christoph Kolbicz retweeted
Replying to @_kolbicz
@_kolbicz homescreen and dock spacing/resizing, running through @zeroxjf Cyanide app. I’ve also added a quick toggle to disable dock background
1
6
361
Uploaded new tweaks to my DarkSword repo: Faster SpringBoard animations, custom icon scaling (resizing), and custom spacing for the Dock and Home Screen. github.com/kolbicz/DarkSword…
5
19
93
23,607
Pinning and unpinning Start menu items on Windows 11 Server 2025 via command line? Yes! Still very early stage - but it’s working 😎
4
1
13
999
Working on a new project: TaskbarPin – Command-line tool to manage your Windows 11 taskbar pins. Pin by app name, index, or exe path, at any position. Unpin, reorder, and export/import layouts across machines. Works with Win32, MSIX, and UWP apps on Windows 11 😎
2
8
574
Christoph Kolbicz retweeted
SetUserFTA 2.x will be the last release supporting 32-bit. SetUserFTA 3.x is native x64 only and drops legacy OS support. It’s now in release candidate stage (no ETA yet) and adds AppDefaultHashRotation more features & optimizations 😎
3
4
622
Christoph Kolbicz retweeted
More on per-user FTA with @_kolbicz SetUserFTA: Setting MSIX Firefox/Chrome as defaults .txt to MSIX Notepad . All repackaged. Thanks again Christoph for the NFR & the best FTA tool for EUC 🇧🇷 #MSIX #SetUserFTA
3
2
6
631
New UCPD.sys pattern update now blocks mshta.exe. I’ve used this workaround since May 2024. It looks like the .hta trick (or inline scripts) got abused in the wild and is now blocked. Yes, this affects the personal edition of SetUserFTA - on consumer Windows.
1
194
UCPD.sys dynamic rules are now live. They’re shipped in a non-executable PE with multiple signature checks and an encrypted payload. I’ve decrypted it – currently it just extends the deny list with a single new entry.
2
5
44
4,370
KB5067036 installs UCPD.sys v4.5, which can now monitor Windows Services and protect additional registry keys for "GamingConfiguration"
4
302
Christoph Kolbicz retweeted
19 Oct 2025
SetUserFTA v3.0 is in the works - featuring UserChoiceLatest support and an additional UCPD.sys bypass. Stay tuned!
1
5
333
Looks like Microsoft is now A/B testing the UserChoiceLatest hash on Windows 11 Enterprise. It's 2025 - and it takes 5,000 lines of C just to change a file type association.
3
228
More technical details: the PE file they are referring to is not executed. Instead, it is used to dynamically update the driver’s functionality, similar to a signature file.: min.news/en/news/6d1f017397d…

Chinese researchers allege #Microsoft’s Windows hides a “backdoor” via UCPD.sys: blocking Tencent, 360 apps but letting foreign rivals pass, logging Chinese IPs in detail, and enabling remote code execution. EU forced openness under DMA; in China it raises privacy & security alarm.
3
655
Christoph Kolbicz retweeted
Chinese researchers allege #Microsoft’s Windows hides a “backdoor” via UCPD.sys: blocking Tencent, 360 apps but letting foreign rivals pass, logging Chinese IPs in detail, and enabling remote code execution. EU forced openness under DMA; in China it raises privacy & security alarm.
2
5
2,082
KB5064081 updates UCPD.sys to v4.4 with four new features and shifts several older ones into the base protection layer. More details coming soon.
1
12
1,008
Microsoft is now enabling almost all the new features I covered in my blog on Windows 11 Pro. My test VM has most of them activated already - interestingly, file rename protection isn’t active yet.
New blog post: UCPD.sys – UserChoice Protection Driver Part 2: kolbi.cz/blog/2025/07/15/ucp…
1
9
1,323
New blog post: UCPD.sys – UserChoice Protection Driver Part 2: kolbi.cz/blog/2025/07/15/ucp…

25
53
9,659
UCPD.sys v4.3 is now rolling out on Windows 11. It brings 6 new protection features (currently inactive) - including one that blocks the file renaming attack 😬
2
7
775
Looks like Microsoft is rolling out the new hash protection more broadly - even my test VM just got migrated to UserChoiceLatest. Time to update @SetUserFTA, I guess 😬
1
2
5
281