How to Remove Autorun.inf Virus?

Autorun.inf Virus Removal

What is autorun.inf?

Autorun.inf is a setup information file or INF used to install or setup softwares and drivers. This is usually used and seen on the CD ROM with the Autoplay. The autorun.inf makes the CD ROM will autoplay, it means this will automatically play or setup upon clicking or play itself or what we called auto installation. If you can see an autorun.inf in your CD ROM drive, this is normal.

When do we say that Autorun.inf is a Virus?

Some people says autorun.inf is a virus but the reality is not. Autorun.inf was only used by the virus to execute or install themself by clicking. On the autorun.inf it contains a setup information or a program setup that will trigger the virus to execute when they are being clicked by the user. This autorun.inf was usually found in the windows C: or in the removable disk. And it is mostly set to invisible or hidden in the windows drive or removable drive.

Ok here we go, let start removing the autorun.inf in your system drive.

First you must enable your Folder Options, make your hidden files be visible to your eyes. You can enable by clicking-left to your My Computer > Tools > Folder Options.

You can follow this configuration when you enable the Folder Option to visible all the hidden files in to your system drive.

After this, you can now start deleting the autorun.inf into your drive C: or removable drive. And you can also remove the unknown files like Braviax.exe, Ravmon.exe, Kxvo.exe, Amvo.exe, Bar311.exe, Svchost.exe or any unknown files that are exist in to the system drive.

How to Remove Kxvo.exe Virus Manually

OK here is another trojan virus again that one of the common problem in our PC is the virus - a computer's parasite. Your PC performance will become slow and almost hang-up that would turn to invalid boot-up of your PC. I just want to share it to you again a trojan virus that i've been experience in my friend's internet cafe shop. This trojan/backdoor virus is almost thesame with the amvo.exe virus which is very harmful that might your PC shutting down. After I have posted about how to remove amvo.exe virus manually, some of you used this instructions and it works successfully, and some are not. Well, in removing the kxvo.exe virus is almost thesame for process of amvo.exe virus. Below you can check on how to do this, but we need to study first, what is kxvo.exe virus is?

What is kxvo.exe virus?

• kxvo.exe is Trojan/Backdoor - it is similar to amvo.exe virus, i think this is their family virus.

Symptoms

• Folder Option is not working - you cannot enable the Folder Option or show the hidden files running into you computer. It will reverted either you have change it and after a while it will change back.
  
• Hidden file problem
• "An exception breakpoint has been reached" a message dialog box came from your Yahoo Messenger.
  

How to solve this?

This is the solution on how to remove the kxvo.exe and to fix the folder option problem. Just follow this steps:

1. Uncheck kxvo.exe from msconfig>> startup (type msconfig in run and click on the startup tab) also and restart your system

1. Click Start > Run and type REGEDIT
2. Go to HKEY_CURRENT_USER > SOFTWARE > Microsoft > Windows > CurrentVersion > Explorer > Advanced
3. On the right side, double click the hidden value and give it a value of 1.
4. Same for HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > Windows > CurrentVersion > Explorer > Advanced > Folder > Hidden > SHOW ALL Change the value of Checked Value to 1.
5. Check if your Folder Option if its working now. If it works! OK you are now ready to delete the kxvo.exe virus now.

Go to your Folder Option and enable the show all the hidden files and you remove the following files if they are exist in the exact location or directory:

c:\autorun.inf
c:\u.bat
c:\amvo.exe

c:\kxvo.exe

c:\awda2.exe
c:\d.com
c:\mvo.dll
c:\amvo1.dll
c:\windows\system32\ amvo.exe

c:\windows\system32\ akxvo.exe
c:\windows\system32\ awda2.exe
c:\windows\system32\ d.com
c:\windows\system32\ mvo.dll
c:\windows\system32\ amvo1.dll
c:\windows\system32\u.bat

Lastly go to Run and type cmd then type regedit, press Ctrl + F to find the files kxvo.exe and delete it. You can now reboot your PC.

Similar procedure to amvo.exe virus removal.

How to remove Bar311.exe virus manually in your PC?

When I was using my PC at home this morning I encountered a simple problem on my PC it’s simply annoying, yes it is true. I have tried to used my CMD and gets my PC shutdown automatically. And there’s a pop-up message that my PC encountered some problems. I was really mad after my all works has not been yet saved to my documents. I was so terrible angry what kind of this living organism is this?

After a minute I was calm and research in the net if what is this, is a virus or just a PC problems? I found an articles that this problems was caused by the virus bar311.exe and I immediately check-out for that file only systems if that exist. Oh, noh! its exist. I automatically remove it manually into my PC, so I just wana to share to you guys on how I remove this bar311.exe virus. But before for that I want to let you know what is bar311.exe is?

This bar311.exe virus is also known as winzip123.exe, as you see into your PC if the bar311.exe if not exist into your computer, you must find also the winzip123.exe. It also comprises as bar311.exe, pc-off.bat, password_viewer.exe, and photos.zip.exe

Some programs and applications may not work cause by this bar311.exe ang all executed files and applications will not run, like the acrobat reader this icon will replace the acrobd.exe and many more applications running to you systems. It also disable the RUN, Folder Options, Registry and also create the pc-off.bat into your system this batch file has a syntax “@echo off shutdown -s -f -t 2 –c” that located in the windows system. If you will used the CMD your system will shutdown automatically.

OK here we go on how to remove this bar311.exe into your PC. J I will show you in manual removal process without using any software or applications.

1. Restart your PC and go the Windows Safe Mode by pressing F8. Why do you need to do this? Yes so that the other files and application will not run like the virus.

Go to MSCONFIG by typing msconfig in the RUN. And check the start-up settings and un-checked the following files “bar311.exe”, password_viewer.exe, or the “photos.zip.exe if they exist.

2. Next go to your REGEDIT to edit some registry files that may cause the problems. Go to Run and type REGEDIT edit the following registry .

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="userinit.exe,bar311.exe" —> remove ", bar311.exe" only… leave userinit.exe because this is used by Windows when you log-in…

[HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
"HideFileExt"=dword:00000000
"ShowSuperHidden"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Command Processor]
"autorun"="c:\Windows\pc-off.bat" –> remove "c:\Windows\pc-off.bat" or delete the autorun key.

3. Press Window + R and place a drive you want to access like this C:, D: and Enter, when accessing the drives to avoid triggering the autorun… Delete the autorun.inf and password_viewer.exe or bar311.exe if they exist. And restart your PC now.

You maybe used the step #2 to checked if the bar311.exe if exist on the registry directories.

4. Use this method to delete the following files if you like just open notepad then type this following syntax below:

@echo off
del /a /f c:\Windows\bar311.exe
del /a /f c:\Windows\password_viewer.exe
del /a /f c:\Windows\photos.zip.exe
del /a /f c:\Windows\pc-off.bat
pause

Then please save this as virusremoval.bat then click to run. This will execute the syntax to remove virus running into your system.

If you are lazy to do this you can follow and go to this directories location and delete this file manually:

C:\Windows\bar311.exe
C:\Windows\password_viewer.exe
C:\Windows\photos.zip.exe
C:\Windows\pc-off.bat

And you’re done! Just simply of that you PC is now safe for the bar311.exe virus. You maybe used this but I always recommend you to used any updated antivirus. J