RogueKiller 8.3.0

[Exterminator]

RogueKiller is a tool written in C, which scans the processes running, and kill those who are malicious. I developed this tool after seeing that some rogues (eg Security Tools) blocked the execution of disinfection programs, and some programs (eg Rkill) appeared ineffective in killing the rogue process. So I developed a tool based on speed of execution, which is to clean up the process and requested clean the registry to make a sanitizing faster and safer then with the usual tools.

User manual:

1: Download the desktop RogueKiller (link above)
2: Quit all running programs
3: On Vista / Seven, right click -> run as administrator
4: Otherwise just throw RogueKiller.exe
5: When prompted, type 1 and validate
6: When the report opens (RKreport.txt is also located next to the executable), save and give to the person who is helping you
7: If the program has been blocked, do not hesitate to try several times. If it really does not (it could happen), rename it to winlogon.exe

Notes:

** If a registry key has been detected, if you are sure it is up to Rogue, go to Mode 2. If you do not get help. In all cases, the infection process have been killed, you can disinfect quietly with more generic tools (eg Malwarebytes)
** If you notice that your HOSTS file is corrupt (HOSTS Section of the report), boost mode 3 RogueKiller to restore a clean copy
** If you notice any unwanted proxy, raise RogueKiller Mode 4
** If you notice any unwanted DNS, restart RogueKiller mode 5
** If your shortcuts and folders on the desktop / start menu / etc have diparu, boost mode RogueKiller 6

>> Download or Here

 

[Littlebits]

I wonder does anyone here actually use RogueKiller?

I always boot into Windows Safe Mode with Networking to remove infections. Malware can not run in Windows Safe Mode therefore a product like RogueKiller is useless to me because there is no malware processes to kill.

Thanks.

 

[Exterminator]

I wonder does anyone here actually use RogueKiller?

I always boot into Windows Safe Mode with Networking to remove infections. Malware can not run in Windows Safe Mode therefore a product like RogueKiller is useless to me because there is no malware processes to kill.

Thanks.

I do the same as you but figured since it is a new version I would throw it out there for somebody to use

 

[madyrocksin]

there are situations when safe mode wont boot becoz of heavy infections, then its gonna be super useful
happened with me while trying to remove sality from a friends pc

 

[Prorootect]

November 26, 2012: Official English description - [EN] RogueKiller official tutorial : on the blog by Tigzy : http://tigzyrk.blogspot.fr/2012/11/en-roguekiller-official-tutorial.html

Tigzy's Home page website with RogueKiller Download link, and description : http://tigzy.geekstogo.com/roguekiller.php

 

[Prorootect]

Latest version is v8.3.1.

Thanks!

 

[Plexx]

I wonder does anyone here actually use RogueKiller?

I always boot into Windows Safe Mode with Networking to remove infections. Malware can not run in Windows Safe Mode therefore a product like RogueKiller is useless to me because there is no malware processes to kill.

Thanks.

I have used a couple of times actually. I believe some of the guides here point/recommend RogueKiller.

Different tools for different needs but majority do bring the same result

 

[Brian]

RogueKiller is a great tool! I use it in my guide: http://www.selectrealsecurity.com/stop-malicious-processes/

Also, with no false positives: https://www.virustotal.com/file/39cc09fa9e738229e3abfdb0f22f7b063bd5bd532f1d60f2c79b538d4c5e0df7/analysis/

 

[Prorootect]

Cheers Brian, your statements are truly real.

(.. and change Homepage link for RogueKiller on your guide, look on my precedent post #5, please).

 

[miragez]

Thanks White Nobster for the introduction of this tool

Brian how is Rogue Killer different from combofix?

 

[Brian]

Thanks, George. I changed the links.

Miragez,

ComboFix is designed to remove malware. It's frequently used by experts on malware removal forums.

RogueKiller is designed to detect and stop malware processes.

 

[Prorootect]

Latest version is v8.3.2.

Thanks!