Korea (한국어) -
Global (English) -
Brazil (Português) -
Japan (日本語) -
Russia (русский) -
[Chinese(简体中文) 即将推出]
WindowexeAllkiller Download : Free Download
WindowexeAllkiller is a free software which can remove unwanted software from your computer at once. WindowexeAllkiller is able to easily remove all Startup, Browser Helper Object, Toolbar, Service, Task Scheduler, Chrome Extension, malware, trojan, ad-popup and so on.
Easy to use, Very simple, Very Powerful.
No Viruses, No Spyware, No Adware, It's free!
System Requirements : .Net framework 2.0 , Windows xp, vista, 7, 8, 10 32/64bit
How to remove [Trojan-GameThief. WFCO0FAT.exe snlogins.dll] using command prompt
You are supposed to start with all programs closed because an Explorer and Taskbar all terminate.
Run a command prompt. [Start] - [Program] - [Accessories] - [Command prompt]
* Important : In Windows Vista/7/8/10, you are advised to select [Run as Administrator] by clicking on [command prompt] using the right mouse button.
When the command prompt is run, there comes out a black screen as below and the cursor begins to flicker.
The letters or shape appearing on the screen might be slightly different, but don't bother. It'll be all right for you just to get a similar screen as below.
|
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corpation. All right reserved.
C:\Users\Administrator>
|
When you fast click the mouse button for three times in a row in the red line(command line) below, you can select all.
Then, mouseclick the selected zone and copy it. (Ctrl + c or Select a [copy] on Right-click contextmenu.)
In case all the zones are not automatically selected, you will have to copy it by dragging the whole of the red line using the mouse.
---------------------------------------------------------------------------------------------------------------
echo Start
echo #
echo ##################### Default System32 directory for x86 x64 #####################
echo #
echo 000 change to the default system directory & cd %WINDIR% & cd system32
echo Kill Process & taskkill /im explorer.exe /f & echo wait
echo Kill Process & tskill explorer & echo wait
echo Kill Process & taskkill /im IEXPLORE.EXE /f & echo wait
echo Kill Process & tskill IEXPLORE & echo wait
echo wait & ping 127.0.0.1 -n 1 > %WINDIR%\pingwait.txt
echo Created by http://www.windowdel.com/en.php?w=120218-trojan-gamethief-wfco0fat-exe-snlogins-dll
echo ################# Created by windowdel.com http://www.windowdel.com #################
echo do not modify any label echo 000 & taskkill /im "rundll32.exe" /f & echo wait echo 000 & tskill "rundll32" & echo wait echo 001 & attrib -r -h -s "%WINDIR%\system32\WFCO0FAT.exe
" & echo windowdel.com echo 001 & del /q "%WINDIR%\system32\WFCO0FAT.exe
" & echo windowdel.com echo 002 & attrib -r -h -s "%WINDIR%\system32\WFCO0FAT10.dll
" & echo windowdel.com echo 002 & del /q "%WINDIR%\system32\WFCO0FAT10.dll
" & echo windowdel.com echo 001 created by windowdel.com echo 003 & attrib -r -h -s "%WINDIR%\system32\WFCO0FAT11.dll
" & echo windowdel.com echo 003 & del /q "%WINDIR%\system32\WFCO0FAT11.dll
" & echo windowdel.com echo 004 & attrib -r -h -s "%WINDIR%\system32\WFCO0FAT20.dll
" & echo windowdel.com echo 004 & del /q "%WINDIR%\system32\WFCO0FAT20.dll
" & echo windowdel.com echo 005 & attrib -r -h -s "%WINDIR%\system32\WFCO0FAT21.dll
" & echo windowdel.com echo 005 & del /q "%WINDIR%\system32\WFCO0FAT21.dll
" & echo windowdel.com echo 006 & attrib -r -h -s "%USERPROFILE%\Microsoft\snlogins.dll" & echo windowexeallkiller.com echo 006 & del /q "%USERPROFILE%\Microsoft\snlogins.dll" & echo windowexeallkiller.com echo 007 & reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{94AC7942-7BE1-4FB9-A7CA-67CD88362758}
" /f & echo windowdel.com echo 008 & reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{94AC7941-7BE1-4FB9-A7CA-67CD88362758}
" /f & echo windowdel.com echo 009 & reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{94AC7948-7BE1-4FB9-A7CA-67CD88362758}
" /f & echo windowdel.com echo 010 & reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IEHlprObj.IEHlprObj
" /f & echo windowdel.com echo 011 & reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IEHlprObj.IEHlprObj.1
" /f & echo windowdel.com echo 012 & reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{94AC7942-7BE1-4FB9-A7CA-67CD88362758}" /f & echo windowdel.com echo 013 & echo HKEY_CURRENT_USER Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "snlogins" /f & echo created by windowdel.com echo 013 & echo HKEY_LOCAL_MACHINE Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "snlogins" /f & echo created by windowexe.com echo 014 & echo HKEY_CURRENT_USER Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WFCO0FAT" /f & echo created by windowdel.com echo 014 & echo HKEY_LOCAL_MACHINE Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WFCO0FAT" /f & echo created by windowexe.com echo 015 your ip is 98.84.18.52 do not delete this label. echo http://www.windowdel.com/en.php?w=120218-trojan-gamethief-wfco0fat-exe-snlogins-dll echo do not modify any label echo do not stop here for x86, you have to start explorer process. echo # echo ##################### Change directory SysWOW64 for x64 OS ##################### echo # echo Remove x86 Application's registry for x64 OS & ping 127.0.0.1 -n 1 > %WINDIR%\pingwait.txt echo change to the syswow64 directory & cd %WINDIR% & cd syswow64 echo 000 & taskkill /im "rundll32.exe" /f & echo wait echo 000 & tskill "rundll32" & echo wait echo 016 & attrib -r -h -s "%WINDIR%\system32\WFCO0FAT.exe
" & echo windowdel.com echo 016 & del /q "%WINDIR%\system32\WFCO0FAT.exe
" & echo windowdel.com echo 017 & attrib -r -h -s "%WINDIR%\system32\WFCO0FAT10.dll
" & echo windowdel.com echo 017 & del /q "%WINDIR%\system32\WFCO0FAT10.dll
" & echo windowdel.com echo 001 created by windowdel.com echo 018 & attrib -r -h -s "%WINDIR%\system32\WFCO0FAT11.dll
" & echo windowexeallkiller.com echo 018 & del /q "%WINDIR%\system32\WFCO0FAT11.dll
" & echo windowexeallkiller.com echo 019 & attrib -r -h -s "%WINDIR%\system32\WFCO0FAT20.dll
" & echo windowexeallkiller.com echo 019 & del /q "%WINDIR%\system32\WFCO0FAT20.dll
" & echo windowexeallkiller.com echo 020 & attrib -r -h -s "%WINDIR%\system32\WFCO0FAT21.dll
" & echo windowdel.com echo 020 & del /q "%WINDIR%\system32\WFCO0FAT21.dll
" & echo windowdel.com echo 021 & attrib -r -h -s "%USERPROFILE%\Microsoft\snlogins.dll" & echo windowexeallkiller.com echo 021 & del /q "%USERPROFILE%\Microsoft\snlogins.dll" & echo windowexeallkiller.com echo 022 & reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{94AC7942-7BE1-4FB9-A7CA-67CD88362758}
" /f & echo windowdel.com echo 023 & reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{94AC7941-7BE1-4FB9-A7CA-67CD88362758}
" /f & echo windowdel.com echo 024 & reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{94AC7948-7BE1-4FB9-A7CA-67CD88362758}
" /f & echo windowdel.com echo 025 & reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IEHlprObj.IEHlprObj
" /f & echo windowdel.com echo 026 & reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IEHlprObj.IEHlprObj.1
" /f & echo windowdel.com echo 027 & reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{94AC7942-7BE1-4FB9-A7CA-67CD88362758}" /f & echo windowdel.com echo 028 & echo HKEY_CURRENT_USER Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "snlogins" /f & echo created by windowdel.com echo 028 & echo HKEY_LOCAL_MACHINE Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "snlogins" /f & echo created by windowexe.com echo 029 & echo HKEY_CURRENT_USER Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WFCO0FAT" /f & echo created by windowdel.com echo 029 & echo HKEY_LOCAL_MACHINE Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WFCO0FAT" /f & echo created by windowexe.com echo 030 your ip is 98.84.18.52 do not delete this label. echo http://www.windowdel.com/en.php?w=120218-trojan-gamethief-wfco0fat-exe-snlogins-dll
echo 031 rechange dir to system32 & cd %WINDIR% & cd system32
echo ################# Created by windowdel.com http://www.windowdel.com ###############
echo do not modify any label
echo del pingwait.txt & del /q %WINDIR%\pingwait.txt
echo 032 & explorer.exe & echo explorer start
echo End
---------------------------------------------------------------------------------------------------------------
All files are deleted when [Paste] is selected by clicking the mouse on the right button in between the command prompt screen after copying.
|
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corpation. All right reserved.
C:\Users\Administrator>
Mark |
Copy |
Paste |
Select All |
Scroll |
Find.. |
|
There might happen a case where files are not deleted due to the next command line(deletion) starts too quickly while terminating the process.
so you are advised to do one more [paste]at the prompt window after all command lines are run.
Once the command lines are all run, you can close the command prompt window.
WindowexeAllkiller is a free software which can remove unwanted software from your computer at once. WindowexeAllkiller is able to easily remove all Startup, Browser Helper Object, Toolbar, Service, Task Scheduler, Chrome Extension, malware, trojan, ad-popup and so on.
WindowexeAllkiller
Easy to Use, Very Simple, Very Powerful, No Viruses, No Spyware, No Adware, It's free!
Removal Guide Similar Software
00233 - Auto Styling Plugin - winaux 1.60 00237 - boan24 00231 - Clean Privacy 00238 - donkey 00229 - everyclean 00227 - FBSolution 00230 - FileDown 00239 - filefinder 00240 - FreeAniViewer 00241 - internetfavoritesite 00226 - kmcodec 00228 - linkpop - PROGRAMFILES 00235 - pc-care 00236 - pc-care2 00242 - privacyguard 00225 - Trojan-GameThief. LO0Cvkl.exe WindowsNetsDll.dll 00232 - Trojan-GameThief. TeO0Vab.exe WindowsNetsDlls.dll 00243 - TurboClean
System Environment (X = System Drive)
Environment variable | Windows xp | Windows vista / 7 / 8 |
%ALLUSERSPROFILE% | X:\Documents and Settings\All Users | X:\ProgramData |
%APPDATA% | X:\Documents and Settings\{User}\Application Data | X:\Users\{User}\AppData\Roaming |
%USERPROFILE% | X:\Documents and Settings\{User} | X:\Users\{User} |
%PROGRAMFILES% | X:\Program Files | X:\Program Files |
%PROGRAMFILES(x86)% | X:\Program Files(x86) | X:\Program Files(x86) |
%COMMONPROGRAMFILES% | X:\Program Files\Common Files | X:\Program Files\Common Files |
%COMMONPROGRAMFILES(x86)% | X:\Program Files(x86)\Common Files | X:\Program Files(x86)\Common Files |
%WINDIR% | X:\Windows | X:\Windows |
%HOMEDRIVE% | X: | X: |
|