Kill rat etc trojens back door functions

 Kill, rat, backdoor, trojan, worm functions

 1. there is two ways to disable function of virus/ RAT/ backdoor/ trojan/ worm and etc :-

a. manually
b. using software/ Tools

2. you can choose one from both techniques. disable virus/RAT/ backdoor/ trojan/ worm and etc manually. there is several application can be use like :-

a. Task Manager
b. Command Prompt
c. Command.com
d. Windows PowerShell

                          

3. from the figure above, we assume that "QKZEFCKP.exe" is a malware. the malware function can be disable/terminate by right clicking on the selected image name, then choose end process tree like figure above. click ok if the popup window like figure below appears :-
                                     
                                         


4.  if the Task Manager  function has been disable by the malware. use cmd/ command prompt/ command.com with commands like :-



 taskkill /F /IM QKZEFCKP.exe /T
QKZEFCKP.exe  can be replaced with malware name that infected to your pc.
/F - refer to force terminate
/IM - refer to image name
/T - refer to Tree kill, terminate all related child processes

5. if this method is not working  . there is other option like using group policy editor by typing  gpedit.msc command in the run box, refer to below figure :




   6. go to :-

  User Configuration > Administrative Templates > System > Ctrl+Alt+Del Options
 
   Double-click on Remove Task Manager and set to Disable and then apply. your Task Manager function should can be use like usual.

7. or, to activate cmd/ command prompt function using gpedit.msc like :-

User Configuration > Administrative Templates > System

Double-click on Prevent access to the command prompt and set to Disable then apply. your cmd should can be use like usual now.

8. or, type on run box services.msc command from Guide & Tutorial>>
#1 Detect virus/ backdoor/ trojan

  or like the figure below :-






where you must change Service status by clicking on Stop button like the figure to deactivate the malware.

9. by using a software like ProcessExplorer,HijackThis, Trust-No-Exe and etc.

10. ProcessExplorer application - most the same like Task Manager, if there is any problem, please post to this thread.

11. HijackThis application - not too complicated to use.

12. Trust-No-Exe - usually used if all techniques to disable/ terminate the malware is not success, where the malware file will be inserted to Deny List :-

               

restart your pc, the malware is not longer executed on startup.
Enjoy Full Tutorial  ... :)

Posted in PC Tuning, Windows