Metasploit mailing list archives

successful exploitation... help on script

From: hdm at metasploit.com (H D Moore)
Date: Thu, 20 Nov 2008 19:46:14 -0600

Error "5" is usually 0xc0000005, aka "ACCESS_DENIED", sounds like the 
shell you obtained doesnt have privileges to kill the AV process. We 
should probably handle the error better in the script and keep processing 
even after the first kill fails.

On Thursday 20 November 2008, jeffs wrote:

thanks.? I get:

 Killing antivirus services on the target...
 killing off mcshield.exe...
 error in script: stdapi_sys_process_kill: Operation failed: 5
 meterpre

Current thread:

successful exploitation... help on script jeffs (Nov 20)
- successful exploitation... help on script MC (Nov 20)
  - successful exploitation... help on script jeffs (Nov 20)
    - successful exploitation... help on script H D Moore (Nov 20)
    - successful exploitation... help on script jeffs (Nov 20)
    - successful exploitation... help on script jeffs (Nov 20)
    - successful exploitation... help on script Patrick Webster (Nov 20)