After I've created a meterpreter session and get admin privileges I try to disable av using SC config avgwd start= disabled but I get access denied error. I've confirmed I have admin privileges so not sure why this won't work. Killav works, any other ideas on how to stop av so once rebooted it won't be on ? I've tried delaying it from starting but I am denied also
Thanks