Spyware, viruses, & security forum: r.kill

Thanks, Bob. I got it from CNet the last time. Does your reply mean that I should reinstall it now, getting it again from CNet and if the warning persists - just ignore it? - Amos.

As an added note..

According to Rkill's developer (Grinler), he writes in the first post of the 45 page thread titled "RKill - What it does and What it Doesn't - A brief introduction to the program " :

'Rkill is currently detected as malware by 3 anti-virus companies. I have submitted the tool to them so that they can remove the listing. Unfortunately, though, false positives occasionally happen. I assure you that there is nothing malicious in Rkill and it only performs the tasks described above.

A scan from virustotal.com as of 08/22/12 shows the following AV vendors flagging RKill with false positives

Comodo: UnclassifiedMalware 20120822
Kaspersky : HEUR:Backdoor.Win64.Generic 20120822
TrendMicro-HouseCall : TROJ_GEN.F47V0821 20120822

Also at least SuperAntiSpyware and MalwareBytes may target Rkill when you rename it to a reserved name like iexplore.exe, explorer.exe, winlogon.exe, etc. This is because they have definitions in place that throws a flag when these reserved filenames are used outside their normal path.

If you see these alerts when running Rkill, you can safely ignore the warnings and continue to allow the program to run.'

At the bottom of the post, you will find a list of changes for each new version. ( Also: Rkill Download Center )

Carol