Monday, December 8, 2014

Remove AutoIt3.exe, Skypee.lnk, Google.lnk and googleupdate.a3x manually.


Remove AutoIt3.exe, Skypee.lnk, Google.lnk and googleupdate.a3x manually.
Download free tool remover here.

These are the following files inside the Skypee and Google folder:
  1.  AutoIt3.exe
  2. Google.lnk
  3. Skypee.lnk
  4. googleupdate.a3x
When executing the AutoIt3.exe or when accidentally click the AutoIt3.exe will Show an Open Dialog Box finding these extensions: .au3 and .a3x file, or the AutoIt3.exe simply executes the googleupdate.a3x and the target of this virus could be much risky.

If your computer is infected with AutoIt3 you can easily remove them by following this simple steps:

First you can open Task Manager by Win+R and type taskmgr and hit Enter (Ctrl+Shift+Esc or Ctrl+Alt+Del)  then Click on AutoIt3.exe and Click "End Process" to end the virus execution.
This also can be done using Command Prompt by typing this following command: "taskkill /im AutoIt3.exe /f" without quote.

Next find the Google and Skypee folder in your Drive.
Example:
C:\Google
C:\Skypee
Delete these folders by using Shift+Delete to permanently removing the files without moving it to Recycle Bin.
You can also type to Command Prompt: "del AutoIt3.exe Google.lnk Skypee.lnk googleupdate.a3x /s /f /a", this will delete these files in all directories and sub-directories in your drive if present.

The next step to do is to delete all the AutoIt3.exe entries to the Registry.
Open Registry Editor by Win+R then type "regedit".
Go to Menu Bar click "Edit" (Alt+E) then select "Find..." then type "AutoIt3.exe" to find all corresponding keys with AutoIt3.exe.
Then Delete all AutoIt3.exe entries when found.

    '32 bit Registry Entries

   "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.a3x\OpenWithList\a"
"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\AntiUsbWorm"
"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\AntiWormUpdate"

"HKEY_USERS\S-1-5-21-2959341437-1417137130-3415374032-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.a3x\OpenWithList\a"

"HKEY_USERS\S-1-5-21-2959341437-1417137130-3415374032-1000\Software\Microsoft\Windows\CurrentVersion\Run\AntiUsbWorm"

"HKEY_USERS\S-1-5-21-2959341437-1417137130-3415374032-1000\Software\Microsoft\Windows\CurrentVersion\Run\AntiWormUpdate"
 
    '64 bit Registry Entries

"HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\AntiUsbWorm"

"HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\AntiWormUpdate"

 "HKEY_USERS\S-1-5-21-3976834753-4095289343-2271009253\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.a3x\OpenWithList\a"

"HKEY_USERS\S-1-5-21-3976834753-4095289343-2271009253\Software\Microsoft\Windows\CurrentVersion\Run\AntiUsbWorm"

"HKEY_USERS\S-1-5-21-3976834753-4095289343-2271009253\Software\Microsoft\Windows\CurrentVersion\Run\AntiWormUpdate"

Then that would be all the steps.
These steps on removing AutoIt3 is based only on my knowledge about the behavior of the virus upon testing it or running it in both 32bit and 64bit version of Windows 7 OS.
I had also developed an application using the Visual Basic for this virus issue for easier and quicker removal of this virus. (I just don't know how to embed the app here.)
 Thank you for reading... God bless...

11 comments:

  1. Hi! do I have to locate and delete this registry entries?
    "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\AntiUsbWorm"

    "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\AntiWormUpdate"

    "HKEY_USERS\S-1-5-21-3976834753-4095289343-2271009253\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.a3x\OpenWithList\a"

    "HKEY_USERS\S-1-5-21-3976834753-4095289343-2271009253\Software\Microsoft\Windows\CurrentVersion\Run\AntiUsbWorm"

    "HKEY_USERS\S-1-5-21-3976834753-4095289343-2271009253\Software\Microsoft\Windows\CurrentVersion\Run\AntiWormUpdate"

    ReplyDelete
  2. Yes you can delete those entries but those are not harmful anymore. The important thing is to delete the file first to prevent it from creating registry entries again...
    :)

    ReplyDelete
  3. I have come up with a better solution to delete the Skypee thingy...

    1. Enter your Local Disk C: drive...

    2. Search for Files that were Modified on 29-Jan-2012 ( I guess this was the date the online miscreants created it. F***kers )

    3. The search results will display AutoIt.exe

    4. Right click to open drop down and open file location of AutoIt.exe, you will get a display of the folder hiding all the Skypee files (6)

    5. Start task manager and end process script AutoIt.exe

    6. Select and delete all the Skypee files (6)...now your PC is a vector for Skypee no more...simples

    ReplyDelete
  4. download Anti AutoIt3
    http://formatlux.blogspot.com/2015/11/anti-autoit3.html

    ReplyDelete
  5. I have come up with a better solution to delete the Skypee thingy...

    1. Enter your Local Disk C: drive...

    2. Search for Files that were Modified on 29-Jan-2012 ( I guess this was the date the online miscreants created it. F***kers )

    3. The search results will display AutoIt.exe

    4. Right click to open drop down and open file location of AutoIt.exe, you will get a display of the folder hiding all the Skypee files (6)

    5. Start task manager and end process script AutoIt.exe

    6. Select and delete all the Skypee files (6)...now your PC is a vector for Skypee no more...simples



    -this is really effective thanks a lot

    ReplyDelete
  6. I have come up with a better solution to delete the Skypee thingy...

    1. Enter your Local Disk C: drive...

    2. Search for Files that were Modified on 29-Jan-2012 ( I guess this was the date the online miscreants created it. F***kers )

    3. The search results will display AutoIt.exe

    4. Right click to open drop down and open file location of AutoIt.exe, you will get a display of the folder hiding all the Skypee files (6)

    5. Start task manager and end process script AutoIt.exe

    6. Select and delete all the Skypee files (6)...now your PC is a vector for Skypee no more...simples



    -this is really effective thanks a lot

    ReplyDelete
  7. I think i have a more effective way of removing this worm (Autoit3.exe , skypee yada yada) all ou have to do is;

    a. Open command prompt (press the windows button, type cmd and right click and select "run as administrator", select yes to proceed when the UAC prompts you)
    b. type this: cd \ (it takes you to the root directory)*click enter*
    c. type this: taskkill /im Autoit3.exe /f (*click enter*)
    d. type this: taskkill /im skypee.exe /f (*click enter*)
    e. type this: del "C:\google" /f /q (*click enter*)
    f. type this: del "C:\skypee" /f /q (*click enter*)
    This should make it go....


    or you can use this means....
    a. open notepad and type these in it.
    taskkill /im Autoit3.exe /f

    taskkill /im skypee.exe /f

    click on save and save it as "name.cmd".

    open another (instance of) notepad..
    type these
    del "C:\google" /f /q

    del "C:\skypee" /f /q

    then save as "del.cmd"

    find the file saved "name.cmd" (hey without the quotes)..right click and run as administrator...
    find the file also named "del.cmd", right click and run as administrator.

    and VOILA! you have successfully removed it.

    NB: Note the usage of the "C:\" is put here to indicate the partition when your WINDOWS OS is installed thus if its on D: enter "D:\" to replace any instance where i placed "C:\"

    ReplyDelete
  8. Yes effective to delete only if the AutoIt3.exe exist on that folder/directory, example. ("C:\google" and C:\skypee").
    del "C:\google" /f /q
    del "C:\skypee" /f /q

    However this command:

    del AutoIt3.exe Google.lnk Skypee.lnk googleupdate.a3x /s /f /a

    will scan folders/directories and delete all AutoIt3.exe, Google.lnk, Skypee.lnk and googleupdate.a3x files if found on the particular drive.
    Example paste this command on cmd:
    C:\>del AutoIt3.exe Google.lnk Skypee.lnk googleupdate.a3x /s /f /a
    OR
    D:\>del AutoIt3.exe Google.lnk Skypee.lnk googleupdate.a3x /s /f /a
    Or in your specific drive partition you want.

    :)

    ReplyDelete
  9. Online Casino | Online Casino | In-depth review of the games, promotions, bonuses
    Online Casino: Enjoy the quality of the games offered. you can enjoy 온카지노 playing games for free, including 바카라 slots, blackjack, 인카지노 and other types of

    ReplyDelete
  10. Casinos Near Casino Lake Tahoe - MapYRO
    A map showing casinos and other 안동 출장샵 gaming facilities located near Casino Lake Tahoe, 문경 출장안마 located in 원주 출장마사지 Stateline at 1334 North Highway 50, 서귀포 출장안마 Stateline, NV 89449, 진주 출장마사지

    ReplyDelete