Go Back   Tech Support Forum > Security Center > Virus/Trojan/Spyware Help

User Tag List

Bleeping Computer's RKill results.

This is a discussion on Bleeping Computer's RKill results. within the Virus/Trojan/Spyware Help forums, part of the Tech Support Forum category. Among various pieces of software leftover from 3rd party access to my problems is the above piece of software, with


Closed Thread
 
Thread Tools Search this Thread
Old 07-16-2019, 06:41 PM   #1
Registered Member
 
Join Date: Mar 2011
Posts: 159
OS: windows 10



Among various pieces of software leftover from 3rd party access to my problems is the above piece of software, with the Desktop Icon designation "Network Security". Its description on the website is:.RKill is a program that was developed at BleepingComputer.com that attempts to terminate known malware processes so that your normal security software can then run and clean your computer of infections.

As RKill only terminates a program's running process, and does not delete any files, after running it you should not reboot your computer as any malware processes that are configured to start automatically will just be started again. Instead, after running RKill you should immediately scan your computer using some sort of anti-malware or anti-virus program so that the infections can be properly removed.

The program runs in command mode. At the end of a run today which didn't identify any running elements was this screenshot. I'd like an guess as to what it means.
Attached Thumbnails
Click image for larger version

Name:	Hosts.jpg
Views:	28
Size:	135.7 KB
ID:	323962  
sigman is offline  
Sponsored Links
Advertisement
 
Old 07-16-2019, 10:35 PM   #2
Moderator
Security Team
 
Gary R's Avatar
 
Join Date: Jul 2008
Location: Yorkshire
Posts: 676
OS: W8.1 x64, Mint Cinnamon 19.2 x64, MX Linux x64



The entries in the log you've "posted" are entries that RKill has detected in your hosts file ... https://www.thewindowsclub.com/hosts-file-in-windows

The hosts file can be used as a means to block access to sites you don't want your computer to access, and the urls listed in your file, are re-directed to 0.0.0.0 which is a loopback address so when your computer tries to access any of those urls it will just loopback and will not make a connection.

If you did not add those entries to your hosts file yourself, or do not know why you would want them blocked, please let me know and we can remove them.
__________________
Gary R is offline  
Old 07-17-2019, 05:39 PM   #3
Registered Member
 
Join Date: Mar 2011
Posts: 159
OS: windows 10



If I understand the link, RKill has created these to prevent me from accessing them, correct? If I find myself blocked from a site I know to be safe, I would have to remove it from the list, right? Otherwise, I can leave the list alone as it seems to be a protection thing, yes?
sigman is offline  
Sponsored Links
Advertisement
 
Old 07-18-2019, 01:26 AM   #4
Moderator
Security Team
 
Gary R's Avatar
 
Join Date: Jul 2008
Location: Yorkshire
Posts: 676
OS: W8.1 x64, Mint Cinnamon 19.2 x64, MX Linux x64



No, RKill did not create the entries, it just reports what it finds.

If you did not add those entries yourself, then the easiest thing to do, is to reset your hosts file.

https://support.microsoft.com/en-us/...to-the-default

Any problems doing that, please let me know.
__________________
Gary R is offline  
Old 07-18-2019, 05:47 PM   #5
Registered Member
 
Join Date: Mar 2011
Posts: 159
OS: windows 10



Thanks. Got the link.
sigman is offline  
Old 07-18-2019, 10:08 PM   #6
Moderator
Security Team
 
Gary R's Avatar
 
Join Date: Jul 2008
Location: Yorkshire
Posts: 676
OS: W8.1 x64, Mint Cinnamon 19.2 x64, MX Linux x64



You're welcome.

If you have any more questions please ask them now.

If not, then in 24 hours I'll close this topic as it appears to be resolved.
__________________
Gary R is offline  
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Post a Question


» Site Navigation
 > FAQ
  > 10.0.0.2
Powered by vBadvanced CMPS v3.2.3


All times are GMT -7. The time now is 12:51 PM.


Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
vBulletin Security provided by vBSecurity v2.2.2 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
User Alert System provided by Advanced User Tagging v3.1.0 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
Copyright 2001 - 2018, Tech Support Forum

Windows 10 - Windows 7 - Windows XP - Windows Vista - Trojan Removal - Spyware Removal - Virus Removal - Networking - Security - Top Web Hosts