How to Remove password_viewer.exe, Winzip123, bar311.exe,
Here’s how:
First, we need to stop the virus from running so we can delete it.
run the Task Manager by pressing CTRL + ALT + DEL
click on the processes tab on the Task Manager
end the following processes: bar311.exe, password_viewer.exe, photos.zip.exe
close the Task Manager window
Now, we will need to tell Windows to not run it by editing the Windows Registry
click Start
click run
type “regedit” in the textbox
click Ok
The Registry Editor window should come up
on the left pane of the registry window, go to this path: HKEY_LOCAL_MACHINESOFTWARE MicrosoftWindowsNTCurrentVersionWinlogon
On the left side, look for userinit
right click on userinit and click modify
you will notice that the value in the text box is userinit.exe, bar311.exe or userinit.exe, password_viewer.exe
delete bar311.exe or password_viewer.exe BUT VERY IMPORTANT: leave userinit.exe
Next, we will remove folder restrictions that have been set by the virus:
Still on the Registry Editor, go to this path: HKEY_CURRENT_USERSoftwareMicrosoft WindowsCurrentVersionExplorerAdvanced
Delete the following entries:
“Hidden”=dword:00000001
“HideFileExt”=dword:00000000
“ShowSuperHidden”=dword:00000001
Next up, we’ll need to delete the registry entry that causes windows to shutdown everytime the command prompt is ran.
In the Registry Editor, go to this path: HKEY_CURRENT_USERSoftwareMicrosoftCommand Processor
delete the autorun key
Lastly, we will delete the autorun.inf file
Open a notepad window
Type this code in the notepad window:
@echo off
c:
attrib autorun.inf -h -r -s
del autorun.inf -h -r -s
d:
attrib autorun.inf -h -r -s
del autorun.inf -h -r -s
del /a /f c:Windowsbar311.exe
del /a /f c:Windowspassword_viewer.exe
del /a /f c:Windowsphotos.zip.exe del /a /f c:Windowspc-off.bat
save the file as “command.bat”
run “command.bat”
YOU’RE DONE!!
If you’ve carefully followed all the instructions that I provided, your computer should be ready to go.
http://blog.edgelacorte.com/2009/01/19/how-to-remove-winzip123-bar311_exe-password_viewer_exe/