Framework Digest, Vol 12, Issue 8

[hdm at metasploit.com (H D Moore)]

On Sun, 2009-01-11 at 09:12 +1000, Professor 0110 wrote:
> Is there another way to restore the directory or data so I can update
> using SVN? 
Yes, just delete the %APPDATA%\msf3 directory and try again. If it keeps
occuring, it means the AV is still running. We have seen this happening
with McAfee; where even if the AV is completely "disabled", the
"FrameworkService" process still mangles the Metasploit files.

> I have an idea. Someone should create an update module that
> automatically updates the Framework once a week or whatever. For those
> of us who are not really SVN savvy, it would be great to see.  

We have one (the SVN snapshot download) that is updated nightly, however
you would have to download, extract, and manually rename to the %APPDATA
\msf3 directory. This still does not fix the problem of your AV mangling
your framework installation, it just avoids the online update issue. For
example, even if you extract the snapshot manually, your AV is still
going to delete and modify files that the framework needs. If you insist
on using Windows to run Metasploit, its your responsibility to disable
the various crappy security software packages that interfere with it :-)

-HD
>