rkill renamed kills the app then run Malaware.
superantispyware and malwarebytes on a flash - run both several times.
gone.
seems like only machines without their monthly windows updates gets these scareware attacks.