ArpanTECH - iKill Service - Prevent Spread of Viruses through Removable Drives

iKill Service - Prevents Spread of Viruses

Version: 1.1
Build: 21
Build Date: 27 December 2009

Minimum Requirements:

1) OS - Windows [98, 2K, XP, Server 2003, Vista...].
2) Processor 400MHz+
3) Ram - 96 MB
4) Microsoft .NET Framework 2.0 (See download link below)
IF using Windows XP or below.

Installation:

Before installing make sure you have Microsoft .NET Framework 2.0.

Select Install folder and click on 'next' twice to begin installation.
Icons will be added to the desktop and the start menu.

A restart is required to start the iKill service. If you don’t want to restart you may manually go to the “Computer Management console” by clicking on start -> run and typing ‘compmgmt.msc’ and clicking the ‘Ok’ button.

In the “Computer Management console” go to “Services and Applications” and click on the 'Services' Node. In the ‘Services’ pane on the right, go to the newly installed ‘iKill Service’ and click on the start
link (Start the Service).

The install and start of the service can be verified in the “Application Log” which is located in the event viewer under ‘System Tools’ .

Working:

1) Anti Virus Feature

This version is primarily for the usage in educational institutions and large offices where Administrators like to install applications which work
in background without user intervention.

- It works by scanning the drives for the presence of removable drives.
- If found, it parses the autorun.inf file for the executables it may run.
- It will automatically delete the suspected files (virus) present on the drive.

In general a USB drive of any kind, a pendrive, ipod, mp3 Players, mobile phones, all may contain viruses, they just act as carriers, the viruses/trojans exploit the autorun.inf file to execute themselves whenever you try to open the drive by double clicking. They even may
shadow the Open, Explore, Search, etc, other features using the shell commands.. like..

shell\Explore\command = virus.exe

Here, when you right click on the drive icon and click on Explore, virus.exe would be launched, infecting the whole system, and then it will start spreading by any means possible...

- So, iKill Service parses the autorun.inf for you and deletes the Virus/Trojans automatically.

There is no use of the autorun.inf in you removable drive. (It is rarely used by some applications to provide some added functionality, like the Wireless Config tool to help setup a home network. But, the applications are limited.) , you can safely delete it.

The iKill service status as seen in the ‘compmgmt.msc’ console Under Services.