How to remove Bar311
75how to remove Bar311.exe virus
Bar311.exe virus or winzip123 includes the following files: bar311.exe, password_viewer.exe, photos.zip.exe and pc-off.bat.
The pc-off.bat contains the syntax "C:/path/shutdown -s -f -t 2 -c" which automatically shutdown your computer when you run the cmd.exe or command.
To remove:
Manual removal
1. run the task manager by clicking Ctrl+Alt+Del or rightclick on the taskbar and click task manager.
In the Process tab click on the following and click end process buttong:
password_viewer.exe or bar311.exe or photos.zip.exe
2. Edit the registry by cliking Start then Run then type regedit then press enter or ok. The registry editor should appear.
In the registry editor you can see the following:
HKEY_CLASEES_ROOTHKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS HKEY_CURRENT_CONFIG
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="userinit.exe,bar311.exe" -> remove ", bar311.exe" only.
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Explorer\Advanced]
Delete the following by pressing delete or rightcick then click delete...
"Hidden"=dword:00000001
"HideFileExt"=dword:00000000
"ShowSuperHidden"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Command Processor] "autorun"="c:\Windows\pc-off.bat" -> remove
"c:\Windows\pc-off.bat" or delete the autorun key
3. On your flash disk or thumb drive rightclick the thumbdrive icon and click on open or on the navagation toolbar just type the thumbdrive ex. f: or e: to avoid triggering the autorun.inf then delete autorun.inf and password_viewer.exe or bar311.exe.
4. Open notepad and type this following;
@echo off
del /a /f
c:\Windows\bar311.exe
del /a /f
c:\Windows\password_viewer.exe
del /a /f
c:\Windows\photos.zip.exe
del /a /f
c:\Windows\pc-off.bat
pause
save this as a batch file, any name with a .bat extension ex. delete.bat
in saving the file, on the save as type instead of Text Documents (*.txt) change it to all files before saving the batch file.
- Counter Strike cheats and tips
Important: This counter strike cheats works and tested on version 1.3. Just try this if it will work on higher version of counter strike. To activate cheats, type in the consolesv_cheats 1Then... - 6 months ago
- How to remove Bar311
Bar311.exe virus or winzip123 includes the following files: bar311.exe, password_viewer.exe, photos.zip.exe and pc-off.bat. The pc-off.bat contains the syntax "C:/path/shutdown -s -f -t 2... - 2 years ago
- How to disable a website or redirect it to another website
How? press start then click runtype ping www.website.com -t Then you will see pinging www-real.wa1.b.example.com [209.131.36.158] with 32 bytes of data: now copy the ip address or write it down ... - 6 months ago
- how to remove tavo kavo and ckvo virus
how to remove kavo, tavo and ckvo virus first go to "start" then click run type "msconfig" then go to "Startup" tab then uncheck the startup item kavo, tavo... - 15 months ago
- How to Install Windows XP Pro
The most common way to get rid of viruses and serious computer software errors is to format you hard disk. Doing this means installing fresh copy of your Operating System. I'm sure you have an... - 5 months ago
PrintShare it! — Rate it: up down flag this hub
Comments
step 3 is just incase your thumbdrive is infected by the virus. if you simply click on your thumbdrive icon, the virus will be activated and will infect your computer again. so i suggest that instead of click on the icon of your thumbdrive, you just type the drive name. for example you type d: or e: of f: in the address bar to open your thumbdrive instead of clicking the icon of your thumbdrive.
who to use the
@echo off
del /a /fc:\Windows\bar311.exedel /a /fc:\Windows\password_viewer.exedel /a /fc:\Windows\photos.zip.exedel /a /fc:\Windows\pc-off.batpause
and how to delete the bar311 in my thumb drive
paste it in the notepad and save it as a batch file ex. delete.bat
then after saving, close the notepad and click the delete.bat icon
am i clear?
still cant erase the virus in the flash drive coz its hidden and lock or something.... pls help me tanx
at [HKEY_CURRENT_USER\Software\Microsoft\Command Processor]
there is no "autorun"="c:\Windows\pc-off.bat" -> remove
how to have it and got it deleted,,?
ure d best i've just follow the steps and the results was so nice thank u so much. BTW how do you know that kind of removing that bullshit.. Btw thanks
hmmmmmmmmmmmmmmmmmmmm
Thank you sooooooooooo much! I fixed it! yay!
hi, thank you so much for your advice on how to remove the bar311.exe.
i've just follow the steps and woola i've got it.hehe
thank you so much for the help...
hi i already followed the steps.
just an additional question. in the step, [HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Explorer\Advanced], i am also seeing "superhidden"-dword:00000000. it is not included in the directions above but should i delete it?
i think you dont have to delete it. we dont know whats the use of that. for example the hidden files in c: which is ntldr, most of the people delete it because it is unfamiliar but the truth is it is used by the system to booth the pc.
dude thanks so much...programers rule!!!!
what if, the task manager dont display the process of bar311.exe or password viewer?? even using HJT or process explorer.
will the malware can still be taken off just by doing step 2 to 4??
thanks!
thank you!
thanks a lot, i got the shit out of my computer.
thanks a lot, i got the shit out of my computer.
thanks a lot, i got the shit out of my computer.
umm, in step 2 ...("Userinit"="userinit.exe,bar311.exe" -> remove ", bar311.exe" only.)...would i be typing that in in the "Edit string" dialog box? and also the DWORDs have this value."Hidden"=dword:00000002 ; "HideFileExt"=dword:00000001 ; "ShowSuperHidden"=dword:00000000,should i delete this...i'm a bit confused..i'm a newbie here..?_?..thanks in advance for response!
thx! dude!
hi. thanks! it really works. thanks much again!
nope you dont have to type it. it will appear if you're infedtec with the virus. i mean your computer
you would delete those things.
oh i c
thanx alot man
thanks learn from experience. always having trouble with that virus just don't let the USB initiate the virus. password viewer starts when autoplay
thank you for this information...
After i follow the instruction my pc now is un able to log in. It alway logging off. Pls Help. tnx
Your PC is infected with a virus that when you log in, it automatically log off.
try to slave your hard disk to another pc with updated unti virus and scan it.
Thnx for this info. Keep on hubbing...
i can't find password_viewer.exe or bar311.exe or photos.zip.exe in the process tab
Bernard says:
2 years ago
pls help me i cant understand step 3 that much...