Filipino Computer Hardware Servicing Technician from Roxas, City Capiz Philippines (Region 6 Western Visayas) for more information contact me via email at renanorola@hotmail.com

Home » Post Item » How to remove bar311.exe virus

How to remove bar311.exe virus

April 7, 2008

I encountered this problem from my computer at home I cannot access my cmd promt that’s why i have reseach from the internet how to remove this kind of virus problem and i found from Edzzy.i.ph how to remove and solve this virus problem. 

This is the symptom of a computer having bar311.exe virus A.K.A. winzip123. The virus comprises bar311.exe, password_viewer.exe, photos.zip.exe and pc-off.bat.

When you boot your Windows XP in Safe Mode the message appears: Thank You!!!
Password:Winzip123

The pc-off.bat contains the syntax like this”C:/path/shutdown -s -f -t 2 -c” which automatically shutdown your computer when you run the cmd.exe. So heres the solution to this problem… just follow these simple steps that im goin to discuss….

Manual removal:

1. upon start up…. after os loading… go to task manager by pressing CTRL+ALT+DEL then kill (end process) password_viewer.exe or bar311.exe or photos.zip.exe…

2. EDIT the following registry entries thru regedit at start/run

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
“Userinit”=”userinit.exe,bar311.exe” —> remove “, bar311.exe” only… leave userinit.exe because this is used by Windows when you log-in…

[HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Explorer\Advanced]
“Hidden”=dword:00000001
“HideFileExt”=dword:00000000
“ShowSuperHidden”=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Command Processor]
“autorun”=”c:\Windows\pc-off.bat” –> remove “c:\Windows\pc-off.bat” or delete the autorun key.

3. go to your thumb drive, please use the folders view in the explorer and use the navigation panel on the left side when accessing the drives to avoid triggering the autorun… then delete autorun.inf and password_viewer.exe or bar311.exe

4. open notepad then type what is shown below as is…

@echo off
del /a /f c:\Windows\bar311.exe
del /a /f c:\Windows\password_viewer.exe
del /a /f c:\Windows\photos.zip.exe
del /a /f c:\Windows\pc-off.bat
pause

then save this as remove.bat then click to run…. it will remove this annoying types of PC shut-off thing of virus… ;)

 Partner Links Buy Anti-Virus

 

Click here to downlod antiru virus pro free

download registry cleaner 

Antivirus Software Download



Share and Enjoy:
  • del.icio.us
Posted by renanorola at 11:17 am | permalink

Previous Comments

Thanks for this site and this guide helps my friend to kill that BAR311!!! its suck! my 3 computers here are not yet fix.. so we will try your guide later if my boss is here.

Thanks

Posted by Himaru at June 27, 2008, 2:07 pm

thanks for the guide!! it do helped
:) :) :)

Posted by ritchel at January 17, 2009, 10:28 pm

thanks bro!

Posted by atac at March 21, 2009, 9:26 pm

All comments are moderated. Your comments will not appear here unless approved by the blog owner. Thank you.

Add a comment