Virus PASSWORD_VIEWER.EXE

[boki]

Virus PASSWORD_VIEWER.EXE

Description: The "password_viewer.exe" virus executes during startup and cannot be easily disabled from the task manager. It shuts down your computer thru a batch file named "pc-off.bat". Surprisingly, this virus cannot be removed by known anti-malware programs but can be easily removed if done carefully on a manual way.

Removal Procedures:

1. Manual:

Here's how:

A. Turn off 'System Restore'.

Right click 'My Computer', click 'Properties', click the 'System Restore' tab, mark/check "Turn off System Restore on all drives", click Ok.

B. Restart computer in "Safe Mode" (press F2 or equivalent before the Windows bootup screen appears).

C. Now go to 'My Computer'. At the Menu bar click 'Tools', click 'Folder Options', click the 'View' tab. Scroll down and mark "Show hidden files and folders", uncheck both "Hide extensions for known file types" and "Hide protected operating system files", if a prompt appears click 'Yes', and then click 'Apply' and 'Ok' to close.

D. Open your system drive (usually drive C: ), open 'Windows', scroll down, look for and delete the following files:

password_viewer.exe
pc-off.bat

- if a prompt appears each instance, click "Delete All".

E. Click the 'Back' button then go back to 'Tools', click 'Folder Options', click the 'View' tab. Scroll down and mark "Do not show hidden files and folders", check both "Hide extensions for known file types" and "Hide protected operating system files" and then click 'Apply' and 'Ok' to close.

F. Restart your computer to normal mode and turn on System Restore back by right clicking 'My Computer', click 'Properties', click the 'System Restore' tab, unmark/uncheck "Turn off System Restore on all drives", click ok.

You can check if the virus is still there by opening the Task Manager/Processes then look for password_viewer.exe. If its not there, you just had a successful virus removal. To test to make sure your computer doesn't shutdown when executing the Command Prompt, go to Start/Run and type cmd.

2. Automatic (Thanks to AVIRA 9-Free Edition)

Avira AV Screenshot



A. First, download Avira 9

Download site 1:

http://kewlshare.com/dl/6c448b569550/avira_by_BOKI.rar.html

(These is my personal account, tested working as of July 23, 2009)

B. Install and update your Avira online.

C. After successful installation, run a complete system scan.

D. If you are infected with the virus, the Avira will automatically disenfect the said virus.

E. Reboot (restart) the system.

[amadjo01]

sir try nyo po mag-download updated antivirus avira or avast

naencounter ko na rin po itong passwordviewer.exe

ang ginawa ko po

1.task manager> endprocess ; passwordviewer.exe
2.run>regedit> HKLM\software\microsoft\windows\currentversion\run > delete passwordviewer.exe
run>regedit> HKCU\software\microsoft\windows\currentversion\run > delete passwordviewer.exe
3.run>gpedit.msc>user config>administrativetemplates>system>prevent access to command prompt = "disabled"
4.tapos delete nyo nalang po sa command prompt kung saang directory sya nakalagay  :/
ang naging problema ko po dyan kapag ni run ko ang cmd nag rerestart, kaya kailangan muna ma end proccess
tsaka ko na po inayus yung registry values tapos gpedit para ma enable yung run,tsaka ko na po binura yung file sa command prompt!



pero mas madali po ang mag download ng antivirus kesa isaisahin yan!!
anyways kaya na po yan ng mga updated na antivirus

goodluck!!!