RogueKiller v 8.5.2

[reynard]

RogueKiller v 5.1.6.0

RogueKiller is a tool written in C, which scans the processes running, and kill those who are malicious. This tool was developed fter seeing that some rogues (eg Security Tools) blocked the execution of disinfection programs, and some programs (eg Rkill) appeared ineffective in killing the rogue process. It was developed based on speed of execution, which is to clean up the process and requested clean the registry to make a sanitizing faster and safer then with the usual tools.
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe464kb Freeware

[reynard]

RogueKiller v 5.2.3.0

NB: All details written in French
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe589kb Freeware

[reynard]

RogueKiller v 5.2.6.0

Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe589kb Freeware

[reynard]

RogueKiller v 5.2.7.0

Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe504kb Freeware

[reynard]

RogueKiller v 5.2.8.0

Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe514kb Freeware

[reynard]

RogueKiller v 5.2.9.0

Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe514kb Freeware

[reynard]

RogueKiller v 5.3.0.0

Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe531kb Freeware

[reynard]

RogueKiller v 5.3.1.0


Website language French
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[DimTam]

RogueKiller 5.3.4.0
Date: 2011-08-30


RogueKiller is a tool written in C, which scans the processes running, and kill those who are malicious. I developed this tool after seeing that some rogues (eg Security Tools) blocked the execution of disinfection programs, and some programs (eg Rkill) appeared ineffective in killing the rogue process. So I developed a tool based on speed of execution, which is to clean up the process and requested clean the registry to make a sanitizing faster and safer then with the usual tools.

User manual:

1: Download the desktop RogueKiller (link above)
2: Quit all running programs
3: On Vista / Seven, right click -> run as administrator
4: Otherwise just throw RogueKiller.exe
5: When prompted, type 1 and validate
6: When the report opens (RKreport.txt is also located next to the executable), save and give to the person who is helping you
7: If the program has been blocked, do not hesitate to try several times. If it really does not (it could happen), rename it to winlogon.exe

Notes:

** If a registry key has been detected, if you are sure it is up to Rogue, go to Mode 2. If you do not get help. In all cases, the infection process have been killed, you can disinfect quietly with more generic tools (eg Malwarebytes)
** If you notice that your HOSTS file is corrupt (HOSTS Section of the report), boost mode 3 RogueKiller to restore a clean copy
** If you notice any unwanted proxy, raise RogueKiller Mode 4
** If you notice any unwanted DNS, restart RogueKiller mode 5
** If your shortcuts and folders on the desktop / start menu / etc have diparu, boost mode RogueKiller 6

Info in English:

http://www.majorgeeks.com/RogueKiller_d6983.html
and in French at manufacturer's site

http://www.sur-la-toile.com/RogueKiller

Download Portable:

http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
or
http://www.majorgeeks.com/RogueKiller_d6983.html
Regards

[reynard]

RogueKiller v 6.0.0.0

Changelog:
V6.0.0 21/09/2011
- Ajout d'un driver embarqué dans les ressources
- Chargement du driver TrueSight (x86 seulement)
- Recherche des Hooks SSDT
- Recherche des Hooks Shadow SSDT
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe622kb Freeware

[reynard]

RogueKiller v 6.1.0

Changelog:
V6.1.0 22/09/2011
- Récupération des vrais adresses de la SSDT
- Ajout option 7 (restauration de la SSDT par index) : OPTION CACHEE car dangereuse. A utiliser sur demande d'un helper
- module TrueSight : Restauration SSDT
- module TrueSight : Kill par appel direct aux APIs NT (DrvNtTerminate)
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe642kb Freeware

[reynard]

RogueKiller v 6.1.1.0

Changelog:
V6.1.1 26/09/2011
- Supprimé messages debug
- TrueSight v0.1
- Ajout driver Whitelist avec masque
- Ajout blacklistPath dans recherche des services
- Drivers WL:
unknown /*Unknown*/
vsdatant.sys /*ZoneAlarm*/
procguard.sys /*ProcGuard*/
aswSP.sys /*Avast*/
aswSnx.sys /*Avast*/
PCTAppEvent.sys /*PCToolsFirewallPlus*/
sp**.sys /*Daemon tools*/
- Rogues progFiles
\\HelpPrivacy\\
\\InfoBoan\\
\\windowsliveprotect\\
\\DrBoan\\
\\Privacyi\\
\\Micropop\\
- Service Blacklist
MPopService
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe697kb Freeware

[DimTam]

RogueKiller 6.1.2.0
Date: 2011-10-07
Size: 707 KB
License: Freeware
Requires: Win7/Vista/XP

Change log:


V6.1.2 07/10/2011
=================

- Drivers WL:
PCTCore.sys /*PCTools*/
bdselfpr.sys /*Bitdefender*/
- Kill des processus vérouillés
- WellKnown processes
audiodg.exe
- Rogue ProgFiles
\\vaccinecom\\
\\PCPlusSecurity\\
- WellKnown WL
sys32\ctfmon.exe
sys32\lsm.exe
sys32\SearchIndexer.exe
sys32\sppsvc.exe
sys32\SearchProtocolHost.exe
sys32\SearchFilterHost.exe
sys32\mctadmin.exe
sys32\dllhost.exe
sys32\alg.exe
sys32\wscntfy.exe
sys32\notepad.exe
sys32\wuauclt.exe
sys32\userinit.exe
sys32\msdtc.exe
windows\agrsmmsg.exe
- Whitelist dll
nvsysrot.dll


Change log in french:

http://www.sur-la-toile.com/RogueKiller/


Download Portable:

http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
or
http://www.majorgeeks.com/RogueKiller_d6983.html

Regards

[reynard]

RogueKiller v 6.1.3

Changelog:
V6.1.3 14/10/2011
- TrueSight v0.2
- Correction de bugs
- Réarrangement du code
- Ajout backup des suppressions registre en .reg
- Ajout d'un module de détection des noms aléatoires
- Blacklist
sys32\lvvm.exe
crss.exe (Cloud Protection)
- Rogue ProgFiles
\\realcleaner\\
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[DimTam]

RogueKiller 6.1.4.0
Date: 2011-10-22
Size: 700 KB
License: Freeware
Requires: Win7/Vista/XP

Change log:


================================================== =======
=== ===
=== RogueKiller Changelog ===
=== ===
================================================== =======
------------
- by tigzy -
------------

V6.1.4 22/10/2011
=================
- Rogue ProgFiles
\\VirusScan\\
\\pcspeedup\\
- Drivers WL:
ehdrv.sys /*ESET Helper Driver*/
- Whitelist
AVGIDSMonitor.exe
- Ajustement de la detection dans le module RANDOMNAME



Change log in french:

http://www.sur-la-toile.com/RogueKiller/


Download Portable:

http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
or
http://www.majorgeeks.com/RogueKiller_d6983.html

Regards

[reynard]

RogueKiller v 6.1.5

Changelog:
V6.1.5 29/10/2011
- Ajout d'un module de vérification en ligne du numéro de versio
- Ajout d'un module d'envoi automatique des rapports à l'adresse du développeur (pour amélioration de l'outil)
- Drivers WL:
fshs.sys /*F-Secure Orange AV*/
- Rogue ProgFiles
\\boankorea\\
\\FastScan\\
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe708kb Freeware

[DimTam]

RogueKiller 6.1.6.0
Date: 2011-11-01
Size: 714 KB
License: Freeware
Requires: Win7/Vista/XP

Change log in french:


V6.1.6 01/11/2011
=================
- Ajout d'un module statistique (connexion base de donnée SLT)
- DNS whitelist:
8.8.4.$
- Correction de bugs
- Whitelist :
windows\BCMSMMSG.exe
windows\*snp2***.exe
windows\stsystra.exe
windows\qmc.exe
windows\cthelper.exe
windows\ALCXMNTR.EXE
sys32\ANIWConnService.exe
sys32\PSDrvCheck.exe
rnupgagent.exe
googletalk.exe
E_FATICDL.EXE
- Drivers WL:
OADriver.sys /*Online armor*/
sp_rsdrv2.sys /*Spyware terminator*/
cmdguard.sys /*Comodo IS*/
SYMEVENT.SYS /*Symantec*/
SASKUTIL.SYS /*SUPER Antispyware*/
PSINProc.sys /*Panda Security*/
- Whitelist DLL
migrate.dll
OIExt.dll
BthAuthenticationTime.dll
NativeHelpNotifier.dll


Download Portable:

http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
or
http://www.majorgeeks.com/RogueKiller_d6983.html

Regards

[reynard]

RogueKiller v 6.1.7

Changelog:
V6.1.7 05/11/2011
- Amélioration du module statistique (Patterns ZeroAccess, Fake HDD, Rogue ProgFiles)
- Correction de bugs
- Ajout d'un module de gestion de la reflection du registre (x64)
- amélioration du backup en .reg (prend en charge les clés au lieu des valeurs seulement)
- Rogue ProgFile
\\PatchUp_Plus\\
\\NVirusKorea\\
\\ProtectCode\\
\\CoreScan\\
\\AntiAvoid\\
\\IPRIVACY\\
\\ProtectKeep\\
\\AnyCop\\
\\windowpc\\
- Whitelist
arservice.exe
supprimé kmservice.exe (crack pour Office 2010)
- Whitelist DLL
IadHide5.dll
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe727kb Freeware

[reynard]

RogueKiller v 6.1.8

Changelog:
V6.1.8 14/11/2011
- Ajout Pattern: PrivacyProtection
- Correction de bugs
- Ajout clé : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Explorer\Advanced : Start_ShowMyComputer
- Ajout clé : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Explorer\Advanced : Start_ShowSearch
- Whitelist
netsession_win.exe
SetWallpaper.cmd
TUAutoReactivator32.exe
%windows%\VM_STI.EXE
%windows%\ZSSnp211.EXE
%windows%\Domino.EXE
FacebookUpdate.exe
googletalkplugin.exe
%windows%\SiSUSBrg.exe
lsnfier.exe
%windows%\Imgtask.exe
mediaget.exe
%windows%\AutoKMS.exe
%windows%\mixer.exe
- Driver WL
SandBox.sys /*Sandboxy*/
RapportPG.sys /*Trusteer (Report)*/
sbaphd.sys /*Sunbelt*/
PavProc.sys /*Panda antivirus*/
PavSRK.sys /*Panda antivirus*/
- Dll WL
KeyboardOnlineTray.dll
mcdvd_32.dll
- Blacklist
AV Security 2012v121.exe
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe729kb Freeware

[reynard]

RogueKiller v 6.1.9

Changelog:
V6.1.9 16/11/2011
- Ajout d'un module de vérification des fenêtres windows ouvertes
- Ajout d'un module de résidu des process (pour registre)
- Correction de bugs
- Window Blacklist
System Fix
Privacy Protection
AV Security 2012
System Restore
System Security 2011
AV Protection Online
Security Sphere 2012
- Driver WL
pxrts.sys /*PrevX real time scanner*/
guard.sys /*AVG 7*/
- Whitelist
%windows%\wanmpsvc.exe
%windows%\*snpstd$
%windows%\sttray.exe
%windows\lclock.exe
%windows\ATKKBService.exe
MessageCheck.exe
%windows\UpdReg.EXE
uUACTokenSvc.exe
GameXNGO.exe
- Whitelist DLL
LC.dll
npSkypeChromePlugin.dll
- Whitelist DNS
4.2.2.$
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[reynard]

RogueKiller v 6.1.10.0

Changelog:
V6.1.10 18/11/2011
- Ajout d'un module de récupération des données des précédents scans (PREVRUN)
- Rogue ProgFiles
sweeperlab
VirusSecurity
- Blacklist
AV Protection 2011v121.exe
- Window Blacklist
AV Protection 2011
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[reynard]

RogueKiller v 6.1.11.0

Changelog:
V6.1.11 30/11/2011
- Ajout d'un module de chargement direct du driver (plus efficace)
- désactivation du module "LOCKED"
- Window Blacklist
BlueFlare Antivirus
Wolfram Antivirus
OpenCloud Security
Malware Protection
Spyware Protection
Cloud Protection
Guard Online
AV Guard Online
Cloud AV 2012
- Rogue ProgFiles
\\NDoctorCom\\
\\perfectcare\\
\\privacyup\\
\\PowerPC\\
\\CleanCatch\\
- blacklist
Cloud AV 2012v121.exe
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[reynard]

RogueKiller v 6.1.12

Changelog:
V6.1.12 02/12/2011
- Ajout check du MBR (User / SPTI) --> désactivé pour tests
- Ajout pattern Rogue.AntiSpy-AH
- Window Blacklist
XP Antispyware 2012
XP Antivirus 2012
XP Security 2012
XP Home Security 2012
XP Internet Security 2012
Vista Antispyware 2012
Vista Antivirus 2012
Vista Security 2012
Vista Home Security 2012
Vista Internet Security 2012
Win 7 Antispyware 2012
Win 7 Antivirus 2012
Win 7 Security 2012
Win 7 Home Security 2012
Win 7 Internet Security 2012
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[reynard]

RogueKiller v 6.2.0

Changelog:
V6.2.0 12/12/2011
- Mise à jour du pattern ZeroAccess (détection du FS $NtUninstallKB / consrv.dll)
- Ajout de mot-clés d'importance dans les rapports (redirection des logs au niveau du serveur PHP)
- Ajout du pattern statistique Root.MBR
- Ajout check du MBR (LL2) + activation du module
- Dump des MBR trouvés dans la quarantaine
- Modification de la fin du script => possibilité de garder le notepad ouvert
- Correction de bugs
- Rogue ProgFiles
\\datasave\\
\\sweeperlab\\
\\virussecurity\\
\\ProtectCop\\
\\HomeBoan\\
\\SmartSafer\\
- Whitelist
pccntupd.exe
pull.exe
RapportService.exe
HWDeviceService.exe
windir\v0330mon.exe
- Driver Whitelist
uphcleanhlp.sys /*WinXP (?)*/
FireTDI.sys /*Mac Afee*/
fslx.sys /*Symantec*/
savonaccesscontrol.sys /*Sophos*/
ShldDrv.sys /*Panda*/
bdrsDrv.sys /*BitDefender*/
- WhitelistDLL
rooksbas.dll
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[reynard]

RogueKiller v 6.2.1.0

Changelog:
V6.2.1 28/12/2011
- Detection MBR codes XP et Vista/7
- Detection MBR codes MaxSS / TDL4 / PiHar
- Modification du module MBR (prise en compte de plusieurs PhysicalDrive)
- Whitelist DLL
%sys32%/LogiLDA.dll
panda_url_filtering.dll
nsMouselib.dll
msconf.dll
- Whitelist
B2CNotiAgent.exe
HpSAUpgrade.exe
HPSFUpdater.exe
panda_url_filtering.exe
MpSigStub.exe
dplaysvr.exe
realplayerent_config.exe
- rogue ProgFiles
\\info-manager\\
- Window BL
Security Monitor
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[reynard]

RogueKiller v 6.2.2.0

Changelog:
V6.2.2 31/12/2011
- Detection MBR Code TestDisk
- Distinction entre Vista / 7 MBR Code
- Detection MBR Code Linux
- Correction d'un bug dans le module de backup REG
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[reynard]

RogueKiller v 6.2.3.0

Changelog:
V6.2.3 09/01/2012
- Whitelist
smad.exe
- Whitelist Dll
BatInfEx.dll
BatLogEx.dll
- Driver Whitelist
hookcentre.sys /*Gdata*/
- Window Blacklist
System Check
- Rogue ProgFiles
\\InfoSafe\\
\\CleanerCom\\
\\MicroVaccine\\
\\PC-Spider\\
\\CYAK\\
\\PcVirusDoctor\\
\\VDoctor Professional\\
\\CheckSpeed\\
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[reynard]

RogueKiller v 6.2.4.0

Changelog:
V6.2.4 12/01/2012
- Ajout HKEY_USERS\\Software\\Classes\\pezfile\\shell\\ope n\\command
- Ajout HKEY_USERS\\Software\\Classes\\.exe\\shell\\open\\ command
- Ajout HKEY_USERS\\Software\\Classes\\exefile\\shell\\ope n\\command
- Correction d'un bug dans le module de sauvegarde REG
- Ajout de l'option a : WhyIGotInfected? => ouverture de la page de WIGI
- Ouverture de liens vers les manips du blogspot en fonction de l'infection detectée (ZeroAccess, FakeRean)
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[reynard]

RogueKiller v 7.0.0.0

Changelog:
V7.0.0 26/01/2012
- Passage en mode GUI
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[DimTam]

RogueKiller 7.0.1
Date: 2012-1-28
Size: 1.14 MB
License: Freeware
Requires: Win7/Vista/XP

Change log:


V7.0.1 28/01/2012
=================
- Fixed a bug in MBR => type scores updated
- Fixed a bug in MBR => Calculation of partition sizes updated
- Change to Max 5 PhysicalDrive
- Added name of the physical disks



Download Portable:

http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
or
http://www.majorgeeks.com/RogueKiller_d6983.html

Regards

[reynard]

RogueKiller v 7.0.2.0

Changelog:
V7.0.2 30/01/2012
- Correction de bugs d'affichages (retours à la ligne en trop) dans l'édition du rapport
- Correction dans le module MBR => taille des partitions actualisé (1ko = 1024 octets)
- Whitelist
adawarebp.exe
DropBox.exe
- Rogue ProgFiles
\\BoanCatch\\
\\pcupgrade\\
\\best-pc\\
\\PCMaster Antispyware\\
\\InfoSeven\\
\\comdoumi\\
- Ajout pattern Rogue.ViusDoctor, Rogue.Zaxar
- Window BL
Antivirus Smart Protection
Malware Protection Center
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[reynard]

RogueKiller v 7.0.3.0

Changelog:
V7.0.3 06/02/2012
- Modification du module LL2 => moins d'erreur d'accès, notemment sur les OS x64
- Correction d'un bug dans le workflow des modes secondaires
- Blacklist
InetAccelerator.exe (Gendarmerie2)
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[reynard]

RogueKiller v 7.0.4.0

Changelog:
V7.0.4 08/02/2012

- Correction d'un bug d'affichage faisant disparaitre les boutons dans certaines basses résolutions d'écran
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[reynard]

RogueKiller v 7.1.0.0

Changelog:
V7.1.0 15/02/2012
- Passage du code en logique UNICODE (au lieu de ANSI)
- Correction de bugs
- Ajout du support des langues:
Czech
Slovak
- Mise à jour des détections MBR whistler/sinowal
- détection MBR myBIOS
- Détection des MBR floodés par NOP
- Blacklist window
Security Scanner
Internet Security
Internet Security 2012
- Rogue ProgFile
\\PCSpeed Service\\
\\everyclear\\
- Blacklist
gema.ex
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[DimTam]

RogueKiller 7.2.0
Date: 2012-02-27
Size: 1.20 MB
License: Freeware
Requires: Win7/Vista/XP

Change log:


================================================== =======
=== ===
=== RogueKiller Changelog ===
=== ===
================================================== =======
------------
- by tigzy -
------------

V7.2.0 27/02/2012
=================
- Ajout d'une option FixMBR dans l'onglet MBR. Cette option devient disponible si une infection MBR est trouvée.
- Possibilité de fixer le bootstrap MBR avec un MBR standard (XP, Vista ,Seven)
- Ajout d'un module de lecture directe des ruches => détection clés / valeurs cachées de l'API
- détection MBR Toshiba
- détection MBR Lenovo
- détection MBR Standard
- détection MBR KIWI Image system
- Whitelist
Spotify.exe
jusched.exe (global)
- Window BL
Windows Functionality Checker
Windows Smart Warden
Home Malware Cleaner
Windows Smart Partner
Antivirus Protection
Windows Telemetry Center
Windows Perfomance Catalyst
Strong Malware Defender


Download Portable:

http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
or
http://www.majorgeeks.com/RogueKiller_d6983.html

Regards

[reynard]

RogueKiller v 7.2.1.0

Changelog:
V7.2.1 29/02/2012
- TrueSight v0.3
- Detection des hooks inline (fonctions SSDT seulement)
- Correction d'un bug dans le module HiveReader
- Driver WL
avipbb.sys /*Avira*/
avkmgr.sys /*Avira*/
- Window BL
Smart Fortress 2012
Windows Shield Tool
Windows PRO Scanner
Windows Basic Antivirus
Windows Stability Guard
Windows Firewall Constructor
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[reynard]

RogueKiller v 7.3.0

Changelog:
V7.3.0 08/03/2012
- TrueSight v0.4
- Possibilité de fixer les hooks inline.
- TrueSight : Détection des hooks IRP (Major et Inline) sur un driver donné -> Atapi.sys
- Possibilité de fixer les hooks IRP inline (peut générer un BSOD dans certains cas, cette fonction reste à améliorer. A utiliser uniquement en dernier recours).
- Ajout d'un messagebox demandant confirmation si aucune suppression n'a été effectuée
- TrueSight : Bypass des fonctions du driver pour Windows 8 (pas compatible pour le moment)
- TrueSight : Optimisations de code
- Detection de Windows 8
- Correction d'un bug dans le module HiveReader (valeur / clés avec accents)
- Ajout d'un module de détection des fichiers FAKED (expérimental)
-> Appliqué sur sys32/drivers
- Correction d'un bug dans le module SHELL
- Correction d'un bug dans le module STARTUP
- Correction d'un bug dans le module WEB
- Module Startup : Possibilité de voir les dossiers de toutes les sessions (au lieu de la courante)
- Surveillance de la clé HKCU\...\Advanced : Start_ShowRun
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[DimTam]

RogueKiller 7.3.2.0
2012-03-22
Author: RogueKiller
Date:
Size: 1.20 MB
License: Freeware
Requires: Win7/Vista/XP
Changelog:


================================================== =======
=== ===
=== RogueKiller Changelog ===
=== ===
================================================== =======
------------
- by tigzy -
------------

V7.3.2 20/03/2012
=================
- [23/03/2012] Ajout lien vers Security Shield (blog)
- [22/03/2012] Module Debug - Second ajout
- [22/03/2012] Module statistique => Activation de plusieurs langages.
- [21/03/2012] Ajout progressBar (permet de savoir si un scan est en cours)
- [21/03/2012] Activation des styles visual
- [21/03/2012] Module Debug - Premier ajout
- [21/03/2012] Correction d'un bug
- [21/03/2012] Window Blacklist
System Shield
Security Shield
- Correction d'un bug dans le module startup
- Ajout de la surveillance du dossier "Common Startup"
- TrueSight v0.5 : Optimisations de code
- MAJ langue Czech / Slovak
- Ajout checkbox "AntiRootkit" qui desactive les fonctionnalites du module TrueSight


V7.3.1 10/03/2012
=================
- Correction d'un bug dans le module faked
- Ajout d'une checkbox pour desactiver le module faked (le scan prend du temps)
- Whitelist
Skype.exe
FixCamera.exe
firefox.exe
plugin-container.exe
- Driver WL
Crypto.sys /*SafeNet*/
mfehidk.sys /*McAfee*/
wpsdrvnt.sys /*Symantec*/


Download Portable:

http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
or
http://www.majorgeeks.com/RogueKiller_d6983.html
Regards

[DimTam]

RogueKiller v7.3.3
2012-04-23

Changelog

- Changing the ACLs before checking RUN key (bug virus Mounted)
- Fixed a bug in HiveReader
- Language support: Greek, Portuguese
- Taking into account the value Start_TrackProgs (Recent Programs menu)

Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[reynard]

RogueKiller v 7.4.0.0

Changelog:
V7.4.0 01/05/2012
- Correction d'un bug dans le module debug
- Ajout du module ExceptionHandler => gestion automatique des plantages (en partie).
Quand un crash survient, une fenêtre s'ouvre et propose à l'utilisateur de l'envoyer automatiquement.
- Window BL
Data Recovery (FakeHDD)
- Support des langues:
Allemand
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[DimTam]

RogueKiller v7.4.1
2012-05-02

Changelog

- Added pattern GEMA
- Added pattern POLICE
- Fixed a bug in readMBR
- Fixed a bug in SSDT
- Whitelist E_FATIHJL.EXE

Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v7.4.2
2012-05-03

Changelog

Fixed a bug in HiveReader

Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v7.4.3
2012-05-04

Changelog

- Code Optimizations
- Fixed a bug in HiveReader
- Implementation patterns for detection process, key RUN, SHELL, Startup
- TrueSight: Securisation code
Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v7.4.4
2012-05-08

Changelog


- Ajout de patterns de détection GENDARMERIE
- Added detection patterns POLICE
"#{1}.#{12+}.exe "# {1}. # {12 +}. Exe
wpbt#{1}.dl{2} wpbt # {1}. dl {2}
hnszs#{1}.exe hnszs # {1}. exe
ms****a.bat a.bat ms ****
ram_reserver64.exe ram_reserver64.exe
itunes_service#{2}.exe itunes_service # {2}. exe
syncservicex86.exe syncservicex86.exe
EPUhelpers.exe EPUhelpers.exe
DNS_Servicex86.exe DNS_Servicex86.exe


Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Regards

[DimTam]

RogueKiller v7.4.5
2012-05-18

Changelog

- Intégration librairie ntreg
- Ajout patterns pour blacklist (GENDARMERIE)
ch8l0.exe
p0j99p.exe
spoolsrv.exe
FSnapshot_x86.exe
BSI.bund.exe
GboxService.exe
InfoServices_a.exe
ksprskylabs1.exe

Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v7.5.0
2012-05-24

Changelog

- Added ability to use RogueKiller under PE environment.
- Ability to scan the windows in hives external connection of SD.
- Fixed a bug in ntreg
- Added desktop suspect in paths
- Add to blacklist patterns (POLICE)
k8h00.exe
VboxServs.exe

Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v7.5.2
2012-05-30

Changelog

- Improved redirection module paths
- Whitelist
SpotifyWebHelper
% windows% / ALCMTR.exe
- Add to blacklist patterns (POLICE)
ArchiverforWin.exe
game_client.exe
WinArchiver.exe

Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v7.5.3
2012-06-05

Changelog

- Improved interface
- Review of translations
- Update detection ZeroAccess (Sirefef)
- Add to blacklist patterns (POLICE)
krussel3.exe
AMD_cpx.exe
Apple_Store.exe
cs8v0k.exe

Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v7.5.4
2012-06-07

Changelog

- Monitoring of key: HKCR \ \ CLSID \ \ {F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} \ \ InprocServer32 (ZeroAccess)
- Add to blacklist patterns (POLICE)
pkg0u.exe

Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v7.6.1
2012-06-29

Changelog


7.6.0
- Adding a user contract (EULA)
- Changing the module files Particular consideration for reasons of comparison by removing + mask
- Share files blacklist
windows\\Installer\\{********-****-****-****-************}\\n
windows\\Installer\\{********-****-****-****-************}\\@
windows\\Installer\\{********-****-****-****-************}\\U
localAppdata\\{********-****-****-****-************}\\n
localAppdata"\\{********-****-****-****-************}\\@
windows\\Assembly\\GAC\\Desktop.ini
windows\\Assembly\\GAC_32\\Desktop.ini
windows\\Assembly\\GAC_64\\Desktop.ini
- Drivers WL
avgidsshimx.sys (AVG)

7.6.1

- Adding a module file verification systems (ASLR + search for signatures)
- Checking the file services.exe
- Adding Signature
ZeroAccess (services.exe)
- Bug fixes (Module Window)
- Add to blacklist patterns (POLICE)
er_00_0_l.exe

Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v7.6.2
2012-07-02

Changelog

- Adding a module kill / relaunch the process including the removal of particular files
(explorer.exe is killed / revived)
- Fixed a bug in the detection of specific files
- Monitoring of key: HKCR\\CLSID\\{42aedc87-2188-41fd-b9a3-0c966feabec1}\\InprocServer32 (ZeroAccess)
- Blacklist
sys32 / n
- Share files blacklist
windows\\Installer\\{********-****-****-****-************}\\L
localAppdata\\{********-****-****-****-************}\\L
sys32\\config\\systemprofile\\Local Settings\\Application Data\\{********-****-****-****-************}\\L
sys32\\config\\systemprofile\\Local Settings\\Application Data\\{********-****-****-****-************}\\U
sys32\\config\\systemprofile\\Local Settings\\Application Data\\{********-****-****-****-************}\\@
sys32\\config\\systemprofile\\Local Settings\\Application Data\\{********-****-****-****-************}\\n

Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v7.6.3
2012-07-08

Changelog

- Fixed a bug in HiveReader (management register values ​​unicode)
- Add to blacklist patterns (POLICE)
roper0dun.exe
rasmxs.exe
SCardDlg.exe


Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Regards

[DimTam]

RogueKiller v8.0.0.0
2012-08-26

Changelog


- [[Ramaniement Code]]
- Monitoring HKEY_LOCAL_MACHINE \ \ SYSTEM \ \ CurrentControlSet \ \ Services \ \ Tcpip \ \ Parameters: DataBasePath (HOSTS)
- Monitoring HKEY_LOCAL_MACHINE \ \ SYSTEM \ \ CurrentControlSet \ \ Services \ \ Tcpip \ \ Parameters: DataBasePath (HOSTS)
- Various improvements
- Added information on cartridge infection - Added a cartridge information on infection
- Redesign of some windows - Redesign of some windows
- Whitelist - Whitelist
StatBar.exe StatBar.exe
% windir% \ ^ ^ Service.exe% Windir% \ ^ ^ Service.exe


Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Regards

[DimTam]

RogueKiller v8.0.2
2012-08-31

Changelog



V8.0.2 31/08/2012
=================
- Fichiers particuliers
\\RECYCLER\\[ANYFOLDER]\\$********************************\\n
\\RECYCLER\\[ANYFOLDER]\\$********************************\\@
\\RECYCLER\\[ANYFOLDER]\\$********************************\\L
\\RECYCLER\\[ANYFOLDER]\\$********************************\\U
- Incproc HJ
{fbeb8a05-beee-4442-804e-409d6c4515e9}


V8.0.1 30/08/2012
=================
- Fixed bugs
- Whitelist
c2c_service.exe
SkyDrive.exe
procexp.exe
- Driver WL
RapportCerberus$ (trusteer)
- Truesight v0.6
Monitoring DriverEntryIO
- Adding patterns to blacklist (POLICE)
install_0_msi.exe
hleo32.exe
regsrv64.exe
msconfig.dat
hos32.exe


Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Regards

[DimTam]

RogueKiller v8.0.3
2012-09-13

Changelog



V8.0.3 13/09/2012
=================
- Fixed a bug in HiveReader
- Fixed a bug in Registry
- Fixed a bug in File ASSO
- Fixed a bug in FF Proxy
- Support for rootkits maxSST (fix disabled because untested)
- Deactivation of "Patched" module (not really used, to many false positives)
- Whitelist DLL
tv_w32.dll
- Whitelist
% Windir% / HelpPane.exe
TeamViewer.exe
tv_w32.exe
TeamViewer_Desktop.exe
ibsvc.exe


Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Regards

[DimTam]

RogueKiller v8.0.4
2012-09-19

Changelog


V8.0.4 19/09/2012
=================
- Encryption of files in quarantine (Use Cryptonic with key "RogueKiller" to decipher)
- Optimization module WEB
- Added API suppression off when a key is protected
- Fixed a bug in HiveReader


Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Regards

[DimTam]

RogueKiller v8.1.1
2012-10-01

Changelog


V8.1.1 01/10/2012
=================
- Traditional Chinese Translation
- Fixed minor bugs
- Adding color to the listviews diffιrencier the type of Detected
- Fixed a bug in the module Blacklist
- Window BL
XP Defender 2013
Vista Defender 2013
Win 7 Defender 2013


V8.1.0 28/09/2012
=================
- Support change language at runtime
- Fixed a bug in the module processes
- Added a plug MBR (for testing)
- Adding a link "website" in entκte report


Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[reynard]

RogueKiller v 8.2.0.0

Changelog:
V8.2.0 22/10/2012
- Truesight v0.7
- Fix langue German
- Divers corrections de bugs
- Whitelist
sys32/pcalua.exe
LogMeInSystray.exe
Dashlane.exe
- DNS Whitelist
86.64.145.14*
129.250.35.251
- Driver WL
SbFw.sys /*GFI Software*/
- Window BL
File Restore (FakeHDD)
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[DimTam]

RogueKiller v8.2.2
2012-11-03

Changelog


v8.2.2 03/11/2012
=================
- Window BL
Micorsoft Security Essential Pro 2013
Windows 8 Defender 2013
- BL
MESP.exe
- Added a whitelist by way
- Corection a bug in the module blacklist
- Change link FR tutorial
- Translation Nιerlandais
- Add the date and manner in the name of the report
- Executable UPX pack

V8.2.1 29/10/2012
=================
- DNS WL
24.222.0.95
- Driver WL
avgtpx86.sys / * AVG * /
regguard.sys / * RegRun * /
- Whitelist
cdloader2.exe
magicJack.exe
AmazonCloudDrive.exe
V0220Mon.exe
msnotif.exe
LGMLauncher.exe
Communicator.exe
- Fixed a bug in debug
- Modifications Module importance
- Adaptation of the driver for Windows 8
- Rιcupιration names userland API SSDT (compatibilitι Win8)


Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Regards

[DimTam]

RogueKiller v8.2.3
2012-11-07

Changelog


V8.2.3 07/11/2012
=================
- Preparation for SQLite
- Optimization Module parsing
- Fixed a bug detection process path x64
- WL dll
- HPStatusBL.dll
- Fixed a bug in Crypt


Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v8.2.3 (2012-11-09)
2012-11-09

Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v8.3.0
2012-11-17

Changelog


V8.3.0 17/11/2012
=================
- Migration of the database donnies
- Fixed bugs


Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[reynard]

RogueKiller v 8.3.1

Changelog:
V8.3.1 20/11/2012
- Réorganisation du traitement
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[DimTam]

RogueKiller v8.3.1 (26-11-2012)
2012-11-26

Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v8.3.2
2012-12-07

Changelog


V8.3.2 07/12/2012
=================
- Support Fix for TDL4 MBR (Thanks XdeadCode)


Download

Portable:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
Regards

[reynard]

RogueKiller v 8.4

Changelog:
V8.4.0 11/12/2012
- Optimisations de code pour passage en x64
- Version x64 disponible
- correction d'un bug dans le module Tasks
- correction d'un bug dans le module Hooks
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exeFreeware

[DimTam]

RogueKiller v8.4.0
2012-12-11

Additional Download

Portable x64:
http://www.sur-la-toile.com/RogueKiller/RogueKillerX64.exe

Regards

[DimTam]

RogueKiller v8.4.0 (14/12/2012)
2012-12-14

Download

Portable x86:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

Portable x64:
http://www.sur-la-toile.com/RogueKiller/RogueKillerX64.exe

Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v8.4.0 (20/12/2012)
2012-12-14

Download

Portable x86:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

Portable x64:
http://www.sur-la-toile.com/RogueKiller/RogueKillerX64.exe

Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v8.4.1
2012-12-23

Changelog


v8.4.1 23/12/2012
=================
- Fixed a bug in PE
- Spanish Language


Download

Portable x86:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

Portable x64:
http://www.sur-la-toile.com/RogueKiller/RogueKillerX64.exe

Regards

[DimTam]

RogueKiller v8.4.1 (28/12/2012)
2012-12-28

Download

Portable x86:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

Portable x64:
http://www.sur-la-toile.com/RogueKiller/RogueKillerX64.exe

Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v8.4.3
2013-01-08

Changelog


V8.4.3 08/01/2013
=================
- Russian Language

V8.4.2 31/12/2012
=================
- Improved PE module


Download

Portable x86:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

Portable x64:
http://www.sur-la-toile.com/RogueKiller/RogueKillerX64.exe

Regards

[DimTam]

RogueKiller v8.4.3 (2013-01-24)
2013-01-24

Download

Portable x86:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

Portable x64:
http://www.sur-la-toile.com/RogueKiller/RogueKillerX64.exe

Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v8.4.4
2013-02-02

Changelog


- Italian Language
- Module PE: Bug fixes
- Detection ZeroAccess - Improvements


Download

Portable x86:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

Portable x64:
http://www.sur-la-toile.com/RogueKiller/RogueKillerX64.exe

Regards

[DimTam]

RogueKiller v8.4.4 (2013-02-03)
2013-02-03

Download

Portable x86:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

Portable x64:
http://www.sur-la-toile.com/RogueKiller/RogueKillerX64.exe

Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v8.5.0
2013-02-08

Changelog


- Better support ZeroAccess


Download

Portable x86:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

Portable x64:
http://www.sur-la-toile.com/RogueKiller/RogueKillerX64.exe

Thanks to TheDutchJewel
Regards

[DimTam]

RogueKiller v8.5.1
2013-02-13

Changelog


- MAJ Detected Necurs.A
- MAJ based donnιes
- Fixed a bug in the module database


Download

Portable x86:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

Portable x64:
http://www.sur-la-toile.com/RogueKiller/RogueKillerX64.exe

Thanks to TheDutchJewel
Regards

[reynard]

RogueKiller v 8.5.2

Changelog:
V8.5.2 23/02/2013
- Déplacement des signatures MBR dans la base de données
- Correction de bugs
Homepage:
http://www.sur-la-toile.com/RogueKiller/
Download:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
or
(x64) http://www.sur-la-toile.com/RogueKiller/RogueKillerX64.exeFreeware

[DimTam]

RogueKiller v8.5.2 (2013-3-09)
2013-03-09

Download

Portable:
http://tigzy.geekstogo.com/Tools/RogueKiller.exe
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

Portable-x64:
http://tigzy.geekstogo.com/Tools/RogueKillerX64.exe
http://www.sur-la-toile.com/RogueKiller/RogueKillerX64.exe
Thanks to TheDutchJewel
Regards