I am able to create an exe with metersploit and copy to my XP sp2 box with AVG running on it, by playing with various encoders or multi encoders with various counts I can usually get passed my AV.
I then copy and paste the code for later use, re-run this code say even a few mins later with a different name e.g. test2.exe instead of test.exe, it fails yet the original test.exe still runs.
I am following metersploit unleashed AV bypass, metersploit primer part 14 and many other examples and bingo it works first time and fails on repeat tries.
I have stopped testing using VirusTotal as I thought this might be alerting AVG.
Any ideas would be appreciated.