How to remove Bar311.exe virus manually in your PC?

When I was using my PC at home this morning I encountered a simple problem on my PC it’s simply annoying, yes it is true. I have tried to used my CMD and gets my PC shutdown automatically. And there’s a pop-up message that my PC encountered some problems. I was really mad after my all works has not been yet saved to my documents. I was so terrible angry what kind of this living organism is this?

After a minute I was calm and research in the net if what is this, is a virus or just a PC problems? I found an articles that this problems was caused by the virus bar311.exe and I immediately check-out for that file only systems if that exist. Oh, noh! its exist. I automatically remove it manually into my PC, so I just wana to share to you guys on how I remove this bar311.exe virus. But before for that I want to let you know what is bar311.exe is?

This bar311.exe virus is also known as winzip123.exe, as you see into your PC if the bar311.exe if not exist into your computer, you must find also the winzip123.exe. It also comprises as bar311.exe, pc-off.bat, password_viewer.exe, and photos.zip.exe

Some programs and applications may not work cause by this bar311.exe ang all executed files and applications will not run, like the acrobat reader this icon will replace the acrobd.exe and many more applications running to you systems. It also disable the RUN, Folder Options, Registry and also create the pc-off.bat into your system this batch file has a syntax “@echo off shutdown -s -f -t 2 –c” that located in the windows system. If you will used the CMD your system will shutdown automatically.

OK here we go on how to remove this bar311.exe into your PC. J I will show you in manual removal process without using any software or applications.

1. Restart your PC and go the Windows Safe Mode by pressing F8. Why do you need to do this? Yes so that the other files and application will not run like the virus.

Go to MSCONFIG by typing msconfig in the RUN. And check the start-up settings and un-checked the following files “bar311.exe”, password_viewer.exe, or the “photos.zip.exe if they exist.

2. Next go to your REGEDIT to edit some registry files that may cause the problems. Go to Run and type REGEDIT edit the following registry .

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="userinit.exe,bar311.exe" —> remove ", bar311.exe" only… leave userinit.exe b
ecause this is used by Windows when you log-in…

[HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
"HideFileExt"=dword:00000000
"ShowSuperHidden"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Command Processor]
"autorun"="c:\Windows\pc-off.bat" –> remove "c:\Windows\pc-off.bat" or delete
the autorun key.

3. Press Window + R and place a drive you want to access like this C:, D: and Enter, when accessing the drives to avoid triggering the autorun… Delete the autorun.inf and password_viewer.exe or bar311.exe if they exist. And restart your PC now.

You maybe used the step #2 to checked if the bar311.exe if exist on the registry directories.

4. Use this method to delete the following files if you like just open notepad then type this following syntax below:

@echo off
del /a /f c:\Windows\bar311.exe
del /a /f c:\Windows\password_viewer.exe
del /a /f c:\Windows\photos.zip.exe
del /a /f c:\Windows\pc-off.bat
pause

Then please save this as virusremoval.bat then click to run. This will execute the syntax to remove virus running into your system.

If you are lazy to do this you can follow and go to this directories location and delete this file manually:

C:\Windows\bar311.exe
C:\Windows\password_viewer.exe
C:\Windows\photos.zip.exe
C:\Windows\pc-off.bat

And you’re done! Just simply of that you PC is now safe for the bar311.exe virus. You maybe used this but I always recommend you to used any updated antivirus. J