KillEmAll (original)

KillEmAll v5+

The original KillEmAll has been replaced by a new KillEmAll (built on d7x technology) rewritten from the ground up and now part of the current d7x Tech Tool release.

KillEmAll (original)

KillEmAll terminates every (currently running) program on your computer except essential Windows processes.  

Originally developed to neutralize running malware, the effectiveness isn’t what it used to be with the newer threats, but it serves quite well still for stopping some malicious processes, plus most running adware and spyware.

The best usage case for KillEmAll to most users, is to close all open web browser windows if you get a suspected malicious popup while visiting a website.  The reason you don’t simply close or “X out” the popup is because malicious code can be run even if you click the X button — it is after all just another button, you might as well be clicking “OK“ or “Yes, please do what you want with my PC…“ but if you don’t click anything and KillEmAll does the work, forcing the application’s process to close without any additional code execution.

Other more mundane tasks include the advantage of quickly closing all applications before performing maintenance on your PC, general troubleshooting, or playing resource intensive games.  (obviously, data used by the applications being closed, if not saved, will be lost!)

Instructions:

• Run by itself for normal operation.
• Hold the SHIFT key while executing to run in Service mode.  (formerly KillEmAllPlus)  This mode elevates KillEmAll to the local system account giving it more process terminating power, and also as a service it will continue to restart KillEmAll.scr (should it be terminated by malware) until you close the app manually.
• Hold the CTRL key while executing to run in Debug mode.  This mode will ask you to terminate each process one by one, and is most useful for debug purposes.

Whitelist Instructions:

Select a process and click the Whitelist button in the KillEmAll GUI.

• or – Simply create a plain text file named “KEA_Whitelist.txt” in a subdirectory called “Config”. Inside the file, put the executable name(s) you wish to whitelist, each on their own separate line. Include the file extension. Keep the whitelist small to avoid impacting execution time / effectiveness of KillEmAll. The idea of the whitelist is pretty much only to add your remote support software executable(s), so you don’t disconnect yourself from a remote support session by when running KEA.

Example whitelist of two items:

• teamviewer.exe
• my support app.exe

News:

• Current – Development on KillEmAll as a stand-alone utility was discontinued with the previous release.
  • A greatly enhanced version is included with our d7II PC Technician software, in addition to variations of the code being added to our other applications such as dSupportSuite and CryptoPrevent.
• 8-15-14
  • Greatly increased startup speed of KillEmAll, so it can terminate more processes faster.
• Updated on 2-18-13
  • Introducing KillEmAll Service mode:  (hold SHIFT while executing)
    • Simulates old behavior of KillEmAllPlus, but better without the interactive services detection prompts..
    • See usage instructions above.
  • Introducing KillEmAll Debug mode:  (hold CTRL while executing)
• Updated on 9-13-12 (included with D7 7.6.1 or better)
  • KillEmAllPlus now runs as an unstoppable Windows service continually restarting itself if malware terminates it.
• Updated on 9-10-12 (included with D7 7.5.40 or better)
  • Modified KillEmAllPlus to startup significantly faster making it far more effective.
• Updated on 1-2-12
  • Added a Whitelist button to the GUI.
• Updated on 11-11-11
  • Added KillEmAllPlus.scr to the package.
• Updated on 9-18-11 to v1.2.5 (included with D7 4.5.3 or better)
  • Added the ability to use a user-defined whitelist of executable names.
• Updated on 7-25-11 (included with D7 4.1.2 or better)
  • Added ability to verify file signatures with sigcheck.exe from Sysinternals, provided it is in the 3rd Party Tools dir, that is.
• Updated on 7-2-11 (included with D7 3.8.6 or better)
  • Added D7 (Malware Scan v2) Out of Place Files scan to KillEmAll. KillEmAll makes extra atempts to terminate potentially running processes (hidden or otherwise) of the files found by the Out of Place Files scan routine.
  • Added File attributes, Google, IFEO, Rename, and Delete options for selected files/processes.
• Updated on 7-14-11 (included with D7 4.0 or better)
  • KillEmAll should now be slightly faster at terminating processes.

License:  

• This software completely FREE for personal and commercial use under the terms of this license.
• This program is provided with no warranties or guarantees of any kind, and that you and only you are held as the bearer of sole responsibility for any use or misuse of this software and any resulting damages in any form, monetary or otherwise.