Results 1 to 3 of 3

Thread: Meterpreter killav.rb script question

  1. #1
    Just burned his ISO
    Join Date
    Apr 2010
    Posts
    5

    Question Meterpreter killav.rb script question

    Metasploit Framework have nice Meterpreter script (killav.rb) that kills all Antivirus processes and some firewalls. Problem is that killing antivirus and firewall processes on target PC will cause various alerts/ warnings and errors messages shown by antiviruses or windows itself. Is it possible to improve killav script to make it to suppress or disable all this warnings silently?
    Last edited by ben015; 04-21-2010 at 07:59 PM.

  2. #2
    Member
    Join Date
    Feb 2010
    Posts
    75

    Default Re: Meterpreter killav.rb script question

    Have you looked at getcountermeasure.rb ??

    "This script is for the identification of third party anti virus, HIPS, HIDS, Firewalls as well as Windows security settings as local Firewall and on Vista if UAC is enabled - This Script is now part of the Metasploit Project"

    Its an updated/newer version of killav.rb

    There is some information at Disabling Antivirus with Meterpreter (Page 1) - Penetration Testing - PaulDotCom Forums where the issue was also been discussed by the author of the script.

  3. #3
    Just burned his ISO
    Join Date
    Apr 2010
    Posts
    5

    Default Re: Meterpreter killav.rb script question

    thanks for the links. Not clear though, can getcountermeasure.rb disable AV and FWs reliably.

Similar Threads

  1. Soundrecorder script Meterpreter
    By enc0de in forum BackTrack Howtos
    Replies: 0
    Last Post: 03-25-2010, 02:20 PM
  2. Running a meterpreter script in the background
    By b3r00tb4ck in forum OLD Newbie Area
    Replies: 0
    Last Post: 01-27-2010, 02:06 AM
  3. Question about meterpreter
    By hackabear in forum OLD Newbie Area
    Replies: 3
    Last Post: 09-30-2009, 08:23 AM
  4. Replies: 1
    Last Post: 04-19-2009, 03:41 AM
  5. Meterpreter Script for Basic Network Enumeration
    By BadKarmaPR in forum OLD Programming
    Replies: 2
    Last Post: 01-04-2009, 10:43 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •