Network Vulnerabilities | Removing antivirus with TDSSKiller.exe

[1.497]

i am not responsible of any issues you cause in your environment, use a VPS preferably

Hello friends, I'm going to show you how to remove antivirus quickly and easily using TDSSKiller which is a legitimate tool from Kaspersky to remove malware, let's take advantage of some functionality for offensive actions. Many antivirus solutions can be stopped by changing the registry key associated with the running antivirus service. An example is to change the “Start” initialization value to 0x00 and then restart the computer for the settings to be validated. I had a lot of work dealing with Kaspersky AV, so I took this as an example to simplify.

Download TDSSKiller:

Hidden Content

You must register or login to view this content.

Hidden Content

You must register or login to view this content.

These are the arguments we will use:



Now remove Kaspersky antivirus, before you do this you need to know the name of the service associated with the antivirus, for example

• Windows Defender - windefend
• Malwarebytes - MBAMService
• Kaspersky - AVP21.3

Now that we have identified Kaspersky, we can remove it:
• TDSSKiller.exe -accepteula -silent -dcsvc AVP21.3

After TDSSKiller.exe runs, the computer will be forced to restart without the user's consent, so it is recommended to do this when the user is away from the computer.



leaving a like is much appreciated and help me to keep publishing threads.

by @Nuttela

by @chatgptstore

by @Gi4npy