Page 2 of 2

Re: new member

Posted: Thu May 05, 2011 9:12 pm
by dave.m
Found a jqs.exe file in task manager and was able to kill xp antivirus 2011, although it kept coming back every time I tried to log on, I left taskmgr open and just kept killing it till I got on-line.
John, and anyone else who has malware that prevents your antimalware or antivirus programs from running can use RKill. It kills the malware processes but does not remove it. Just run RKill and then when it displays that the malware has been stopped, run your MBAM or SAS or AV program.
As RKill is updated regularly, you should only download and run it as and when needed. You cannot download a version and install it to keep 'just in case'.

Instructions and downloads are available at Bleeping Computers

Re: new member

Posted: Thu May 05, 2011 9:27 pm
by thescruff
Yea Dave, but when it won't let you log into the internet, you're kind of screwed. :roll:

And as you say, you can't install it just in case.

Actually down loaded rkill on the Mac but couldn't transfer it ::b

Re: new member

Posted: Fri May 06, 2011 7:54 am
by chat_to_rich
I often find that a bootable CD is the best course of action with a major infection. The trouble is you need a second computer to build and update the CD. You can then boot from the CD and run virus scans etc. without any malware interferring. I like the Trinity Rescue Kit http://trinityhome.org/Home/index.php?c ... &locale=en and Ultimate Boot CD for Windows http://www.ubcd4win.com/

Re: new member

Posted: Fri May 06, 2011 8:13 am
by thescruff
Thanks Rich.

I'll have a look at that tomorrow.

I have a windows partition on the Mac so could build it from there.