KillEmAll Mini Released

[FoolishTech]

It's been a while since I've been a target, so I felt the strange need to post here. That, and I just released a new(ish) free tool that might be nice for scripting and in malware removal scenarios, for those not using d7x of course.

Background: KillEmAll is a ‘panic’ button with an ‘ask questions later’ attitude, designed to neutralize, terminate, and later identify all non-essential running programs. Great for quickly closing unwanted apps, system inspection, and even malware removal!

KillEmAll Mini is a no frills implementation of the fully featured KillEmAll which has no user interface, no update capabilities, no definitions file capabilities, it doesn't show you what apps it terminated, etc..

Simply run the .exe and it terminates unnecessary programs running under any standard user account. If Windows is configured with UAC enabled (default) then you can right-click and choose Run as Administrator to kill all other programs running under an Administrator/System account.

KillEmAll Mini.exe will display a prompt when completed, but it can be scripted to display no prompt by passing “/auto” to it on the command line. e.g. “KillEmAll Mini.exe /auto”

Download it from the main KillEmAll page!

 

[Slaters Kustum Machines]

Is there an internal whitelist that you maintain for the mini or would this only be useful for in person repairs as it would kill remote sessions? I really liked the full version when we used D7II with the ability to not kill remote software.

 

[FoolishTech]

There is an internal whitelist I can make additions to such as remote support software; a few things are already whitelisted along those lines but you'll need to test to find out if it works for you. At one point I would say everything but I haven't updated it in a long time and there's a lot more remote support options and changes since I updated that part of the internal whitelist. If you give me .exe names I can do add to the internal list what isn't there.

 

[FoolishTech]

Wanted to update; I saw a bunch of downloads of the full version after this post, but before I updated it. I figure ppl who got the new 'Mini' version also downloaded the older full version... Previous full version was a BETA from 2016, current full version was released yesterday Feb. 3rd, 2019 and is now available from the same page.

Also the full version supports user-generated whitelists like SKM was asking about, though the Mini does not.

Edit: also full version is free as well, but is quite larger in size if you're pushing remotely. Again I'd be willing to update the Mini's internal whitelists with remote support .exe files if you can send me the names/path of the ones that it is killing.

 

[hjelpio]

Thank you FoolishTech.

 

[fencepost]

I'd use caution on excluding killing of remote access tools, possibly have different builds (or tweak the executable name?) that techs could use to keep only the remote tool they're using. Seems like one thing you might want to kill would be someone remotely connected via software you're not using.

 

[gis-tim]

Keep up the good work FoolishTech!

 

[ninive_]

i use this killemall a lot: https://free-online-app.com/killemall.exe-windows-instantly-quicker/
has a hardcore look on the desktop if you are a metal fan

 

[GTP]

Isn't this just a shortcut to "End task" on Explorer?

 

[ninive_]

Isn't this just a shortcut to "End task" on Explorer?

yeah, but customers love when it looks cool.

 

[GTP]