A forum for reverse engineering, OS internals and malware analysis 

Forum for announcements and questions about tools and software.
 #14939  by Brian
 Mon Jul 30, 2012 10:02 pm
A new version of Rkill has been released: http://www.facebook.com/BleepingCompute ... 0646421911
07/30/12: Rkill version 2.0 is released.

This version contains many new features. These features can be found below.

-Rewritten as a single executable.
-Much much faster.
-Better reporting:
-Rkill now only lists those processes it actually terminates.
-Writes all actions it takes and any results into rkill.txt log file on the desktop.
-Details the registry keys it fixes. These are only some policies, executable associations, IFEO, and DisallowRun keys.
-The ability to use Rkill without remote control apps being terminated. This has been tested with TeamViewer, VNC, and Logmein. If you use a custom application, I still suggest you create a folder for it rather than running it from a Userprofile.
-Chrome is no longer terminated.
-Can kill file impersonators found in any directory (svchost.exe, winlogin, etc)
-Makes a registry backup of any IFEO, Proxy settings, DisallowRun, or Policies that it removes.
-Has the ability to terminate 64-bit processes as well.