{"id":81,"date":"2012-01-03T20:15:03","date_gmt":"2012-01-03T20:15:03","guid":{"rendered":"http:\/\/www.lukestratton.co.uk\/blog\/?p=81"},"modified":"2012-01-03T20:28:11","modified_gmt":"2012-01-03T20:28:11","slug":"how-to-kill-malware-processes-in-windows","status":"publish","type":"post","link":"https:\/\/www.lukestratton.co.uk\/blog\/2012\/01\/03\/how-to-kill-malware-processes-in-windows\/","title":{"rendered":"How to Kill Malware Processes in Windows"},"content":{"rendered":"
\"\"<\/a>

A Typical 'Fake AV' known as 'Security Shield'<\/p><\/div>\n

I’ve had to deal with a number of nasty bits of malware recently. Most ‘Fake Anti-Virus’ infections are easy to remove, however you can never be absolutely sure that everything has been cleaned, and the malware which you think you’ve got rid of, may have installed some other nasties, like keyloggers. In this circumstance I usually recommend a full wipe of the hard drive and a re-install of Windows. The recovery partition is usually OK, however some malware can compromise this, resulting in an infected clean installation!<\/p>\n

If you really don’t want to go ahead with re-installing Windows for whatever reason, I came across an extremely useful program which can help in the preliminary steps to disinfection.<\/p>\n

RKill<\/a> is a handy program written by\u00c2\u00a0Lawrence Abrams\u00c2\u00a0from BleepingComputer.com<\/a>, which after execution, instantly ends all known malware processes. This may be useful if the malware is preventing you from running programs. You might be thinking, “But how can I run this if it blocks all programs?”. Well the answer is on RKill’s download page. They provide a number of pre-renamed versions of the application which can attempt to trick the malware into thinking it is another program.<\/p>\n

After running RKill, it may take a few minutes before it hunts out and ‘kills’ the malware processes, however once complete, you can then run a removal tool such as MalwareBytes Anti-Malware<\/a>\u00c2\u00a0to eliminate it.<\/p>\n

Running RKill alone will not remove the malware from your system.<\/span><\/strong><\/p>\n

 <\/p>\n

I’m not going to give the usual lecture on how to stay safe online, but just remember:<\/p>\n