Tuesday, November 22, 2011

Disable Symantec AV via scripting

A small script to quickly disable Symantec Antivirus 11 (Symantec Endpoint Protection) for those moments that it needs to be disabled quickly:

Open up an administrative commandprompt and type the following commands:

sc config "Symantec AntiVirus" start= disabled
sc config ccEvtMgr start= disabled
sc config SmcService start= disabled

net stop "Symantec AntiVirus"
net stop ccEvtMgr

taskkill /IM smc.exe /F

Symantec Antivirus is now completely disabled


  1. C:\Windows\System32>taskkill /IM smc.exe /F
    ERROR: The process "Smc.exe" with PID 2372 could not be terminated.
    Reason: Access is denied.

  2. Hi, I got the same result like Mark.
    Can u help us how to bypass the admin?

    1. I had no such problems at the time I wrote that post, and unfortunately I have no way to test this, but I see other posts about this issue here: http://superuser.com/questions/109010/kill-a-process-which-says-access-denied