Roguekiller Malware

0 views
Skip to first unread message

Vinnie Frevert

unread,
Aug 5, 2024, 4:37:37 AM8/5/24
to blocargramling
Irecently learned about a piece of Anti-Malware software called RogueKiller. Well, I guess "learned about" is a bit generous, because other than being similar to Malwarebytes in a lot of ways, at least at a cursory glance, I know next to nothing about it, and further information is pretty difficult to come across. For instance, the Wikipedia article was mysteriously deleted three years ago.

However, allegedly one of the developers of RogueKiller is also a developer at Malwarebytes, so I was wondering; could somebody please help me shed some light on the differences between RogueKiller and MalwareBytes?


RogueKiller (the user who created the tool) developed the application as a portable scanner designed to target difficult to remove infections, particularly those such as rogue/fake AVs known for blocking Malwarebytes and other security apps from running. Over time the scanner became pretty robust and eventually RogueKiller (again, the user who created the tool) was hired by Malwarebytes to work as a member of the Research team (this is not unlike how sUBs, developer of ComboFix also works for Malwarebytes as a member of Research).


I'm not sure what the status of RogueKiller (the scanner) is these days, but based on what I know of it, it is just a basic scan/remediation tool based on what are essentially scripts/batch files using custom rolled defs made by the developer of the tool to target the threats he came across in his own research. It was definitely a useful tool, especially when other tools would fail to run, but compared to Malwarebytes it is quite limited in its capabilities as I understand it. You can learn more about it here. Apparently the paid version offers extended features such as automatic updates, more control over scan options, access to CLI functions and ticketed private support. It doesn't appear to offer any sort of real-time protection/preventative protection so it's mainly just a more robust version of the free tool with access to support tacked on.


If somebody were unable to install MB3 or Malwarebytes Anti-Rootkit due to malware preventing the executables from running (a recent example), do you believe RogueKiller would still be viable for remediating such a situation, since its relative obscurity would lower the likelihood that it would be targeted?


Perhaps, but it depends on whether the bad guys have coded it to block RogueKiller or not, and often times they'll just use a whitelist rather than a blacklist so that everything outside of the applications they specify are blocked, which would prevent even unknown security tools from running (there are ways around this, but they require additional steps to 'trick' the malware into allowing the tool/scanner to run; we did all of this when we built Chameleon for Malwarebytes 1.x; if such threats become commonplace they'll likely adapt Chameleon to 3.x to deal with them).


If one is unable to install Malwarebytes in the first place due to malware, then I don't really think version differences actually matter that much. Once the initial malware infection has been cleared up, a user can install MB3 in place of the 2.x files.


That's the problem, it really doesn't work because as soon as Chameleon launches MB2, it tries to update to MB3 which Chameleon isn't compatible with so the process fails and the scan never runs. You have to disable checking for new versions in MB2 to do it which isn't easy with all the automation that Chameleon uses. Besides that, the threat signatures/engine in MB2 are very lackluster compared to the latest MB3 builds so there is a very good chance that any new resident threat that successfully blocks Malwarebytes would not be detectable/removable via MB2.


That said, the Research team is investigating the current round of threats to be doing this (apparently variants of SmartService/Yelloader; PUP-installing rootkits that cropped up over the past year or two but disappeared for a while which have now returned once more) and I expect they have a plan to deal with them.


Besides that, the threat signatures/engine in MB2 are very lackluster compared to the latest MB3 builds so there is a very good chance that any new resident threat that successfully blocks Malwarebytes would not be detectable/removable via MB2.


This is a very true statement... just yesterday I scan a computer that had MB2 and every time the user opened up the Chrome browser they would immediately get Block notifications from MB2 in the system tray. Scanning with v2 yielded no results. I asked the user why they were not using MB3 and they stated they did not even know there was a new version. So I upgraded them to MB3 and then performed a scan. Low and behold, found 89 items. Performed a clean, reboot and all is well now, so having the latest version is always the best course for scans to be fully effective.


2024 Roguekiller uses 72 MB memory is very light and can detect video downloader Professional software viruses, Malwarebytes 200MB, and ESET 90 MB can't detect it but it doesn't mean they are not good anti-virus software.


If you can not show that the related malicious code self replicates, then its a trojan. Due to the propensity of malware being trojans, it is always best to describe the malicious code as a trojan or simply "malware" until it can be "typed" within the malware taxonomy.


On the other hand there are trojans that will also prepend, append or cavity inject malicious code into a legitimate file. However that file can not infect other files. The infection stops with that targeted file. These files are either deemed to be "trojanized" or "patched". Since trojans can not spread on their own, they need assistance.


Whether you are a small business with a few clients, or a top 10 company running thousands of remote cleanups, we get you covered. No machines limitation*, everything is included in your license.


I see the bogus files and if I remove 1, 2 more appear. Saw RogueKiller Anti-Malware and expected more disappointment. Instead it cleaned my system ! Others Anti-malware said my system was clean. RogueKiller easily did what the others missed. Awesome!




Powered with innovative Artificial Intelligence and Cloud signatures engine, RogueKiller is the best virus removal tool. Try our free virus cleaner now for free !


RogueKiller antivirus comes up with a very innovative clipboard protection. The engine monitors suspicious programs and prevents them from reading -or writing- sensitive data from the clipboard.


Web browsing and gaming requires more and more resources, this is something we all know. So do we, therefore we developed our antivirus scanner keeping in mind your computer needs to stay usable.


Nowadays ransomware are one of the biggest online threats. Not only they destroy your precious documents, your family pictures, but they also threaten to leak them online.


Everybody struggles with passwords. Despite the surge of passwords managers, they remain a big concern for many. And it gets even worse when malware steal the password of your favorite social network and use it on your bank account (many people use the same password everywhere).


RogueKiller Anti-Malware has a simple interface, and all its features can be accessed from the sidebar. Near the top of the sidebar is the scan feature, which scans your PC and creates a list of suspicious files.


Not only that, but you can also check the last time your computer was scanned, and what potentially dangerous files were found, from the app's control panel. To deal with potential malware or viruses, simply scan your computer periodically and it will detect suspicious files, that you can decide to keep or delete.


Uptodown is a multi-platform app store specialized in Android. Our goal is to provide free and open access to a large catalog of apps without restrictions, while providing a legal distribution platform accessible from any browser, and also through its official native app.


To renew your license you can either:

- Login to your account (click here)and find licenses to renew in "Licenses" tab.

- Choose a period and devices, then use the form below to fill your license details and click "Renew" button.


THIS PRODUCT KICKS ASS !!, im thinking about getting a lifetime key,,, but also wondering if i get a regular key also, after a year,,, is it automatic subscription or can i disable auto and choose when to update it


I have been researching new DLL Injection techniques and got to know RogueKiller. I found it to be an excellent product to fight and detect malware. It uses a unique approach not used by most of the well known firewalls and AV programs. Keep on the good work! Michael Haephrati, Secured Globe, Inc.


Obviously RogueKiller is their go to malware product. It worked and that was enough for me. I bought that too. It has since captured something at the same time as Microsoft that was so bad Microsoft disconnected me from their servers. That time Microsoft fixed it but RogueKiller had caught it. .


This product is amazing. I use this along with a few other tools to keep all my personal work/gaming computers clean. I even made my employees get it and it literally saves my company money when our computers run fast, great, like new. 10/10. Please continue to improve this and keep our computers healthy.

3a8082e126
Reply all
Reply to author
Forward
0 new messages