Results 1 to 2 of 2

Thread: Task kill in meterpreter returns "Access is denied" even as SYSTEM??

Hybrid View

  1. #1
    Just burned his ISO
    Join Date
    Sep 2008
    Posts
    9

    Default Task kill in meterpreter returns "Access is denied" even as SYSTEM??

    Getuid returns that I'm running as NT AUTHORITY\SYSTEM:

    Code:
    meterpreter > getuid
    Server username: NT AUTHORITY\SYSTEM
    But using "kill [pid]" tells me access is denied!

    Code:
    meterpreter > kill 2520
    Killing: 2520
    [-] stdapi_sys_process_kill: Operation failed: Access is denied.
    Similarly dropping into a shell:

    Code:
    C:\WINDOWS\system32>taskkill /F /PID 2520
    taskkill /F /PID 2520
    ERROR: The process with PID 2520 could not be terminated.
    Reason: Access is denied.
    What gives?? The process in question is avgwdsvc.exe - the avg watchdog service. If NT AUTHORITY\SYSTEM doesn't have access, who does??

  2. #2
    Just burned his ISO
    Join Date
    Feb 2010
    Posts
    22

    Default Re: Task kill in meterpreter returns "Access is denied" even as SYSTEM??

    try to stop the Service first, then the process
    (AV-Killer batch)

    ...haez
    www.h43z.tk --blog

Similar Threads

  1. File Managment Problem "Access Denied"
    By FurryTurtle in forum Beginners Forum
    Replies: 4
    Last Post: 07-16-2010, 10:42 AM
  2. Silly question: Where are "home" and "system" icons ?
    By fjecp in forum Beginners Forum
    Replies: 2
    Last Post: 04-07-2010, 08:57 PM
  3. How to add a "power off" button to the task bar
    By Goldhedge in forum OLD BackTrack 4 Howto
    Replies: 0
    Last Post: 11-22-2009, 02:27 AM
  4. problema "permission denied"
    By fedrooo in forum Angolo dei Newbie
    Replies: 2
    Last Post: 11-09-2009, 05:26 PM
  5. ettercap "can't create lf.ecp:Permission denied"
    By demonize in forum OLD Newbie Area
    Replies: 1
    Last Post: 06-02-2008, 03:13 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •