RedGiant

Would you be willing to share some information about AVKill, or where one can look to get more information? Was it just a bunch of net stop {service} commands? I've been reading about modifying executables to avoid detection, but killing the AV may be easier (or not). Seems like the AV co's are making it harder to stop the service, no matter what privs you have.

First off, thanks for the effort to make this a better product. Now, out of curiosity, does your stick execute if the computer is in lock screen? I built a U3 stick a few months ago (either Switchblade or Hacksaw) but noticed that it doesn't work if the computer is in lock screen. Poking around the MSN site, I read that the auto-run purposely doesn't work if the lock screen is enabled. Not sure if I have an old version that has since been modified to get around this. Also, is AVKill your program, or did you get it from somewhere else? I'd like to see the source or understand if it is merely a series of net stop {service} or something more detailed. McAfee is proving to be a very formative opponent.