Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Rkill – Repair Tool of the Week.


15 Jan 2010   #1
JMH

Win 7 Ultimate 64-bit. SP1.
 
 
Rkill – Repair Tool of the Week.

Comments from Corrine & Jacee sought!

Refer link -
https://mvp.support.microsoft.com/co...awrence+Abrams

Rkill is made by a Microsoft MVP “Lawrence Abrams” and is available in 4 different extensions. An .EXE, .COM, .SCR and a .PIF

Quote:
The malware world is changing. It’s getting smarter.
In fact, some infections will detect that you have launched an anti-malware tool such as MalwareBytes and close it down as soon as you open it, which makes your job much harder. This is the exact situation Rkill is designed for.
Read more -
Rkill – Repair Tool of the Week | Technibble

My System SpecsSystem Spec
.

15 Jan 2010   #2

Win7 Enterprise, Win7 x86 (Ult 7600), Win7 x64 Ult 7600, TechNet RTM on AMD x64 (2.8Ghz)
 
 

Thanks JMH,

I have a friend that just got hit by Internet Security 2010 Fake AntiVirus

Having a terrible time removing it, since it has dis-abled IE, MalwareBytes, Trojan Remover, etc.

Hope this works
My System SpecsSystem Spec
15 Jan 2010   #3

Microsoft Community Contributor Award Recipient

Windows 7 SP1, Home Premium, 64-bit
 
 

I have never used Rkill, but I have made some notes on it from a respected source:

It is intended to terminate active rootkits. If your anti-virus program flags it as a malicious process, ignore the flag.


If a rootkit is active it may lie to or block access to MBAM.

DO NOT REBOOT after running Rkill, until you have run MBAM.

Note any malware Rkill reports as having terminated.

Open and run MBAM to fix any malware problems it detects. Save the report.

Delete any restore points

Run online scanners

Run Rkill again, don't reboot, then rerun MBAM.
My System SpecsSystem Spec
.


15 Jan 2010   #4

Windows 7 & Windows Vista Ultimate
 
 

Quote   Quote: Originally Posted by JMH View Post
Comments from Corrine & Jacee sought!
rkill definitely has come in handy when people I am helping cannot launch standard programs such as MBAM because they are blocked by the infection.

Quote   Quote: Originally Posted by DocBrown View Post
I have a friend that just got hit by Internet Security 2010 Fake AntiVirus
Take a look at the instructions here: Remove Internet Security 2010 (Uninstall Guide)

Quote   Quote: Originally Posted by ignatzatsonic View Post
I have never used Rkill, but I have made some notes on it from a respected source:

Delete any restore points

Run online scanners

Run Rkill again, don't reboot, then rerun MBAM.
1) Do NOT delete restore points until the computer is clean. The only harm in an infected restore point is having to start the cleanup process over again. That is better than a borked system by a bad removal process.

2) It is only necessary to run rkill again if unable to run MBAM or other programs after the restart. Note, however, if you get a message that rkill is an infection, the message is most likely a fake warning by the rogue. Leave the warning on the screen and then run Rkill again.
My System SpecsSystem Spec
15 Jan 2010   #5
JMH

Win 7 Ultimate 64-bit. SP1.
 
 

Quote   Quote: Originally Posted by Corrine View Post
Quote   Quote: Originally Posted by JMH View Post
Comments from Corrine & Jacee sought!
rkill definitely has come in handy when people I am helping cannot launch standard programs such as MBAM because they are blocked by the infection.

Quote   Quote: Originally Posted by DocBrown View Post
I have a friend that just got hit by Internet Security 2010 Fake AntiVirus
Take a look at the instructions here: Remove Internet Security 2010 (Uninstall Guide)

Quote   Quote: Originally Posted by ignatzatsonic View Post
I have never used Rkill, but I have made some notes on it from a respected source:

Delete any restore points

Run online scanners

Run Rkill again, don't reboot, then rerun MBAM.
1) Do NOT delete restore points until the computer is clean. The only harm in an infected restore point is having to start the cleanup process over again. That is better than a borked system by a bad removal process.

2) It is only necessary to run rkill again if unable to run MBAM or other programs after the restart. Note, however, if you get a message that rkill is an infection, the message is most likely a fake warning by the rogue. Leave the warning on the screen and then run Rkill again.
A big "THANKS" for that.
My System SpecsSystem Spec
15 Jan 2010   #6

Microsoft Community Contributor Award Recipient

Windows 7 SP1, Home Premium, 64-bit
 
 

I have no reason to believe I have a rootkit, but I just ran the program.

I ran the exe version and the com version. Both completed within maybe 15 seconds. I got no onscreen report of any kind--the window simply disappeared.

Is this normal behavior when no issues are found? I would have guessed I would see a notice of some kind onscreen.
My System SpecsSystem Spec
15 Jan 2010   #7

Windows 7 & Windows Vista Ultimate
 
 

@JMH -- You're welcome.

ignatzatsonic, Rkill isn't the only tool of its nature nor is it a fancy program -- it is a tool Grinler created to accompany the tutorials and for our use in the forums. Since it did not find any known malware processes to kill, it closed.

My System SpecsSystem Spec
15 Jan 2010   #8

Microsoft Community Contributor Award Recipient

Windows 7 SP1, Home Premium, 64-bit
 
 

OK.

Thanks Corrine; I just wanted to confirm I understood default behavior. I will keep it around and hope I never need it.
My System SpecsSystem Spec
16 Jan 2010   #9

Windows 7 & Windows Vista Ultimate
 
 

No need to keep it around. It is best downloaded fresh if needed so you can benefit from updates that would include additional processes.
My System SpecsSystem Spec
Reply

 Rkill – Repair Tool of the Week.




Thread Tools



Similar help and support threads for2: Rkill – Repair Tool of the Week.
Thread Forum
Solved Laptop has gone into startup repair 4 times in one week General Discussion
Windows system repair tool not working General Discussion
Computer Repair tool kit help. Software
best Registry Repair Tool Software
Inbox Repair Tool General Discussion
W7 Registry Repair Tool (What SHood i use) Software

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 03:13 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33