Virus password_viewer.exe,bar311.exe,photos.zip.exe

Wednesday, August 27, 2008

step 1

start > run > type ‘regedit’

step 2

edit regsitry :

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]“Userinit”=”userinit.exe,bar311.exe” —> remove “, bar311.exe” only… leave userinit.exe because this is used by Windows when you log-in…

step 3

[HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Explorer\Advanced]
“Hidden”=dword:00000001
“HideFileExt”=dword:00000000
“ShowSuperHidden”=dword:00000001

step 4

[HKEY_CURRENT_USER\Software\Microsoft\Command Processor]“autorun”=”c:\Windows\pc-off.bat” –> remove “c:\Windows\pc-off.bat” or delete the autorun key.

step 5

go to pendrive, please use the folders view in the explorer and use the navigation panel on the left side when accessing the drives to avoid triggering the autorun… then delete autorun.inf and password_viewer.exe or bar311.exe

step 6

open notepad and do your own remover :

@echo off
del /a /f c:\Windows\bar311.exe
del /a /f c:\Windows\password_viewer.exe
del /a /f c:\Windows\photos.zip.exe
del /a /f c:\Windows\pc-off.bat
pause

step 7

save and rename the notepad

step 8

run the remover and see!!

Posted by Mr.Razali at 2:23 AM  

0 comments:

Post a Comment