π AntiVirusBlocker disables the victim from installing an antivirus by DNS sinkholing all antivirus websites urls and IPs via the windows custom DNS router - c:\Windows\System32\Drivers\etc\hosts. To gain elevation to do so it uses a modified version of π
You can download the latest tarball by clicking here or latest zipball by clicking here.
Download the project:
$ git clone https://github.com/catzsec/AntiVirusBlocker.git
Enter the project folder
$ cd AntiVirusBlocker
Run AVBlock:
$ powershell -File AntiVirusBlocker.ps1
β ONLY USE FOR EDUCATIONAL PURPOSES β
Any questions, errors or solutions, create an Issue in the Issues tab.