hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Full Version: Killing Processess
kbnet
Referring to the following script (orginially posted by Goobers)
http://www.governmentsecurity.org/forum/in...81&hl=CCApp.exe

CODE

pgm = "<process name>"                            
set wmi = getobject("winmgmts:")
sQuery = "select * from win32_process " _
      & "where name='" & pgm & "'"
set processes = wmi.execquery(sQuery)
for each process in processes
process.terminate
next


I would like to gather a list of AV processess that this script is capable of terminating. As i understand it works on Norton Antivirus 2004. I have only personally tried this script on Kaspersky Personal Edition (kav.exe) and was unsuccessful in terminating the process. However, i know the script works as it worked for other windows processess.

To save me installing loads of anti virii progs i wander if some of you could run this script and try to terminate your AV. Could you please post the AV product, version and whether the script was successful.

Just dump the code in a .vbs file and change the pgm variable to your AV process name.

Cheers
AgentOrange
http://www.securiteam.com/windowsntfocus/6U009208KE.html

I don't know of any useable code, but that poc is pretty amazing. If you search on this board there are countless scripts that kill av's are firewalls.

Peace out
AdmiralB
lol i was thinking maybe ending more cridical proccesses
Serhat
QUOTE(AgentOrange @ Nov 5 2004, 10:34 PM)
http://www.securiteam.com/windowsntfocus/6U009208KE.html

I don't know of any useable code,  but that poc is pretty amazing.  If you search on this board there are countless scripts that kill av's are firewalls.

Peace out
*



Compiled exe + source...
Was bored heh

Serhat
Starlight
thx, i will test that application smile.gif
Katja
i will test it wink.gif

edit: works fine ...
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.