Unfortunately this is not the case, in most instances you will find that 'End Process' will have no effect after the RPC has been compromised. Nor can you move/delete or edit/copy/paste whilst it's running, nasty.
Yes it works very well. You just need to run the removal tool then reboot your system.
-- Later, Gary

