WindowexeAllkiller Download : Free Download
WindowexeAllkiller is a free software which can remove unwanted software from your computer at once. WindowexeAllkiller is able to easily remove all Startup, Browser Helper Object, Toolbar, Service, Task Scheduler, Chrome Extension, malware, trojan, ad-popup and so on.
Easy to use, Very simple, Very Powerful.
No Viruses, No Spyware, No Adware, It's free!
System Requirements : .Net framework 4.0 , Windows xp, vista, 7, 8, 10, 11, 32/64bit
Removal Guide [WinHost XMRig miner - APPDATA] Using command-prompt (한국어로 보기)
Tag : XMRig miner, Mnr, 채굴기
You are supposed to start with all programs closed because an Explorer and Taskbar all terminate.
Run a command prompt. [Start] - [Program] - [Accessories] - [Command prompt]
* Important : In Windows Vista/7/8/10/11, you are advised to select [Run as Administrator] by clicking on [command prompt] using the right mouse button.
When the command prompt is run, there comes out a black screen as below and the cursor begins to flicker.
The letters or shape appearing on the screen might be slightly different, but don't bother. It'll be all right for you just to get a similar screen as below.
|
|
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corpation. All right reserved.
C:\Users\Administrator>
|
When you fast click the mouse button for three times in a row in the red line(command line) below, you can select all.
Then, mouseclick the selected zone and copy it. (Ctrl + c or Select a [copy] on Right-click contextmenu.)
In case all the zones are not automatically selected, you will have to copy it by dragging the whole of the red line using the mouse.
-----------------------------------------------------------------------------------------------------------------------------------
echo Start
echo #
echo ##################### Default System32 directory for x86 x64 #####################
echo #
echo 000 change to the default system directory & cd %WINDIR% & cd system32
echo Kill Process & taskkill /im explorer.exe /f & echo wait
echo Kill Process & tskill explorer & echo wait
echo Kill Process & taskkill /im IEXPLORE.EXE /f & echo wait
echo Kill Process & tskill IEXPLORE & echo wait
echo wait & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo Created by http://windowdel.com/nw.php?w=210409-winhost-xmrig-miner-appdata-delete
echo 001 & taskkill /im "build.exe" /f
echo 001 & tskill "build"
echo 001 taskkill wait & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo 001 & del /q "%APPDATA%\WinHost\build.exe"
echo 002 & taskkill /im "kernel.exe" /f
echo 002 & tskill "kernel"
echo 002 taskkill wait & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo 002 & del /q "%APPDATA%\WinHost\kernel.exe"
echo Current time 2024-11-26 00:31:55
echo 003 your ip is 18.191.165.149 do not delete this label.
echo 004 Remove All Folder and Subfolder Start
echo 005 & rmdir /s /q "%APPDATA%\WinHost"
echo 005 Remove All Folder and Subfolder End
echo 006 Remove Task Scheduler Start
echo 007 & schtasks /delete /tn "UpdateWindows" /f
echo 007 Remove Task Scheduler end
echo http://windowdel.com/nw.php?w=210409-winhost-xmrig-miner-appdata-delete
echo do not stop here for x86, you have to start explorer process.
echo #
echo Please don't put this batch-script on your blog or website, get this url.
echo http://windowdel.com/nw.php?w=210409-winhost-xmrig-miner-appdata-delete
echo #
echo ##################### Change directory SysWOW64 for x64 OS #####################
echo #
echo Remove x86 Application's registry for x64 OS & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo change to the syswow64 directory & cd %WINDIR% & cd syswow64
echo 008 & taskkill /im "build.exe" /f
echo 008 & tskill "build"
echo 008 taskkill wait & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo 008 & del /q "%APPDATA%\WinHost\build.exe"
echo 009 & taskkill /im "kernel.exe" /f
echo 009 & tskill "kernel"
echo 009 taskkill wait & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo 009 & del /q "%APPDATA%\WinHost\kernel.exe"
echo Current time 2024-11-26 00:31:55
echo 010 your ip is 18.191.165.149 do not delete this label.
echo 011 Remove All Folder and Subfolder Start
echo 012 & rmdir /s /q "%APPDATA%\WinHost"
echo 012 Remove All Folder and Subfolder End
echo 013 Remove Task Scheduler Start
echo 014 & schtasks /delete /tn "UpdateWindows" /f
echo 014 Remove Task Scheduler end
echo http://windowdel.com/nw.php?w=210409-winhost-xmrig-miner-appdata-delete
echo 015 rechange dir to system32 & cd %WINDIR% & cd system32
echo del ping_wait.txt & del /q %WINDIR%\ping_wait.txt
echo 016 & explorer.exe & echo explorer start
echo End
-----------------------------------------------------------------------------------------------------------------------------------
All files are deleted when [Paste] is selected by clicking the mouse on the right button in between the command prompt screen after copying.
|
|
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corpation. All right reserved.
C:\Users\Administrator>
| Mark |
| Copy |
| Paste |
| Select All |
| Scroll |
| Find.. |
|
There might happen a case where files are not deleted due to the next command line(deletion) starts too quickly while terminating the process.
so you are advised to do one more [paste]at the prompt window after all command lines are run.
Once the command lines are all run, you can close the command prompt window.
Removal Guide Similar Software
00661 - Amazon Music Helper
00676 - Between 1.0.8.0 v2021.09.18
00668 - ESTsoft ALDeal
00671 - FileMong v2021.08.13
00662 - GFile v2020.10.23
00667 - GoodTab - APPDATA v2021.01.07
00664 - jjinpl.com Webhard
00672 - MoDaDam YoutubeDownloader
00666 - msafespt - APPDATA v2020.12.21
00673 - NWFAX v2021.09.15
00663 - OnPlay Webhard
00677 - Outline 1VPN v2021.09.30
00674 - safevisit v2021.09.17
00675 - ShanaEncoder - HOMEDRIVE v2021.09.17
00665 - SManager Webhard
00679 - Ssadafile
00669 - sysTrans - APPDATA
00678 - Windows Groundix v2021.10.24
|