Presentation of Malekal Live CD (Win8PESE) features

1.1.9. RogueKiller

In the "RogueKiller" category of the start menu, you will find the "RogueKiller" program with 2 shortcuts :

• RogueKiller : to launch RogueKiller without loading a driver.
  This makes it possible to launch this utility in the event of a problem with the normal mode of this one.
• RogueKiller : allows you to run this anti-malware in normal mode.

When launching RogueKiller, this utility will check for updates.

Then, you will have to accept the terms of use of this program by clicking on : Accept.

Launch the analysis of your computer by clicking on the "Scan" button (top right).

RogueKiller will tell you what it has found malicious in the processes, the registry, the Windows "hosts" file, ...
To solve the detected problems, it's enough to use the "Delete" and "Fix ..." buttons located on the right.

1.1.10. Security

In the "Security" category of the start menu, you will find the programs :

• CapperKiller : tool created by anti-virus company Kaspersky which helps to remove Trojan-Banker.Win32.Capper infection.
• HijackThis : tools to detect potentially malicious changes that may have been made to your system.

As you can see, this "Kaspersky CapperKiller" tool just helps to cure the Trojan-Banker.Win32.Capper infection.

When launching the TrendMicro HijackThis utility, you will have to accept the publisher's license agreement by clicking on : I Accept.

Click on the button : Do a system scan only.

A list of sensitive keys appears and makes it possible to locate, for example, the default pages which would have been changed in the settings of Internet Explorer.

1.1.11. Supplementary Office

In the "Supplementary\Office" category of the start menu, you will find the program : xCHM.

As you can see, this is a program to open software help files in .CHM format.

1.1.12. System

In the "System" category of the start menu, you will find the programs :

• FileASSASSIN : tool for deleting stubborn files in different ways.
• MemTest : tool to test your random access memory (RAM) with a graphical interface.
• MyEventViewer : alternative to Windows Event Viewer.
• Unlocker : allows you to unlock files to delete recalcitrant files.

FileASSASSIN is a program created by Malwarebytes (author of the well-known anti-malware MBAM) which allows you to delete recalcitrant files by trying in particular to close the processes that use the desired file.

Note : in this case, the "Use delete on Windows reboot functions" option will not work.

When you launch the "MemTest" tool for the first time, this message will appear.
Just click OK.

As you can see, this is a graphical version of MemTest.

Nevertheless, it is possible that this one does not work in free version in your case.

MyEventViewer allows you to view Windows events.
Just like you would with the usual Windows Event Viewer.