Thursday, November 14, 2013

DOwnnlOad keeepEr adware remove

echo Start
 echo #
 echo ##################### Default System32 directory for x86 x64 #####################

 echo #
 echo 000 change to the default system directory & cd %WINDIR% & cd system32

 echo Kill Process & taskkill /im explorer.exe /f & echo wait

 echo Kill Process & tskill explorer & echo wait

 echo Kill Process & taskkill /im IEXPLORE.EXE /f & echo wait

 echo Kill Process & tskill IEXPLORE & echo wait

 echo wait & ping 127.0.0.1 -n 1 > %WINDIR%\pingwait.txt

 echo do not modify any label

echo 001 & del /q "%ALLUSERSPROFILE%\DOwnnlOad keeepEr\9oSn.exe"

echo 001 & del /q "%ALLUSERSPROFILE%\DOwnnlOad keeepEr\*.exe"

echo 001 & del /q "%ALLUSERSPROFILE%\DOwnnlOad keeepEr\*.*"

echo 001 & del /q "%ALLUSERSPROFILE%\WeeKaapp\*.*"

echo 001 & del /q "%ALLUSERSPROFILE%\Download keeper\QPcgy04.dll"

echo 001 & del /q "%ProgramFiles%\DOwnnlOad keeepEr\*.dll"

echo 001 & del /q "%ProgramFiles%\WeeKaapp\*.dll"

echo BHO Remove Start

echo 002 & echo HKLM.BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FDFF596-F0BC-C232-9CD7-A0EFE3A26BE4}" /f & echo 000 BHO CLSID

echo 002 & echo HKLM.BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{09DF61AC-B4A3-C517-8743-B636C23368D7}" /f & echo 000 BHO CLSID

echo 002 & echo HKLM.BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C8CAD4E-919C-02ED-0592-9B23B773F550}" /f & echo 000 BHO CLSID

echo 002 & echo HKCU.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FDFF596-F0BC-C232-9CD7-A0EFE3A26BE4}" /f & echo 001 BHO Ext Key

echo 002 & echo HKCU.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{09DF61AC-B4A3-C517-8743-B636C23368D7}" /f & echo 001 BHO Ext Key

echo 002 & echo HKCU.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6C8CAD4E-919C-02ED-0592-9B23B773F550}" /f & echo 001 BHO Ext Key

echo 002 & echo HKCU.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1FDFF596-F0BC-C232-9CD7-A0EFE3A26BE4}" /f & echo 001 BHO Ext Key

echo 002 & echo HKCU.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{09DF61AC-B4A3-C517-8743-B636C23368D7}" /f & echo 001 BHO Ext Key

echo 002 & echo HKCU.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6C8CAD4E-919C-02ED-0592-9B23B773F550}" /f & echo 001 BHO Ext Key

echo 002 & echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{1FDFF596-F0BC-C232-9CD7-A0EFE3A26BE4}" /f & echo 002 BHO CLSID

echo 002 & echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{09DF61AC-B4A3-C517-8743-B636C23368D7}" /f & echo 002 BHO CLSID

echo 002 & echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{6C8CAD4E-919C-02ED-0592-9B23B773F550}" /f & echo 002 BHO CLSID

echo BHO Remove End

echo 003 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C1A27135-69EB-8D44-7358-34727DD7B820}" /f & echo 000 Uninstall Key

echo 003 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C1A27135-69EB-8D44-7358-34727DD7B820}" /f & echo 001 Uninstall Key

echo 005 Folder and Subfolder All delete Start

echo 006 & rmdir /s /q "%ALLUSERSPROFILE%\Download keeper"

echo 006 & rmdir /s /q "%ALLUSERSPROFILE%\DOwnnlOad keeepEr"

echo 006 & rmdir /s /q "%ALLUSERSPROFILE%\WeeKaapp"

echo 006 & echo 123 > "%ALLUSERSPROFILE%\DOwnnlOad keeepEr"

echo do not modify any label

echo #

echo ##################### Change directory SysWOW64 for x64 OS #####################

echo #

echo Remove x86 Application's registry for x64 OS & ping 127.0.0.1 -n 1 > %WINDIR%\pingwait.txt

echo change to the syswow64 directory & cd %WINDIR% & cd syswow64

echo 007 & del /q "%ALLUSERSPROFILE%\Download keeper\QPcgy04.dll"

echo BHO Remove Start

echo 008 & echo HKLM.BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FDFF596-F0BC-C232-9CD7-A0EFE3A26BE4}" /f & echo 000 BHO CLSID

echo 008 & echo HKCU.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FDFF596-F0BC-C232-9CD7-A0EFE3A26BE4}" /f & echo 001 BHO Ext Key

echo 008 & echo HKCU.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1FDFF596-F0BC-C232-9CD7-A0EFE3A26BE4}" /f & echo 001 BHO Ext Key

echo 008 & echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{1FDFF596-F0BC-C232-9CD7-A0EFE3A26BE4}" /f & echo 002 BHO CLSID

echo BHO Remove End

echo 009 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C1A27135-69EB-8D44-7358-34727DD7B820}" /f & echo 000 Uninstall Key

echo 009 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C1A27135-69EB-8D44-7358-34727DD7B820}" /f & echo 001 Uninstall Key

echo 011 Folder and Subfolder All delete Start

echo 012 & rmdir /s /q "%ALLUSERSPROFILE%\Download keeper"

echo 012 & rmdir /s /q "%ALLUSERSPROFILE%\DOwnnlOad keeepEr"

 echo 013 rechange dir to system32 & cd %WINDIR% & cd system32

 echo do not modify any label

 echo del pingwait.txt & del /q %WINDIR%\pingwait.txt

 echo 014 & explorer.exe & echo explorer start

 echo End