The Philippine Electronics and Technology Forum
February 10, 2012, 12:44:18 PM *
Welcome, Guest. Please login or register.

Login with username, password and session length
 
   Home   Help Search Login Register  

Pages: [1]   Go Down
  Print  
Author Topic: Virus PASSWORD_VIEWER.EXE  (Read 604 times)
boki
Size AAA Battery
***

Pogi/Ganda Points: 4
Offline Offline

Gender: Male
Posts: 52


-=(erpat ni Bombi)=-


WWW
« on: October 25, 2009, 08:07:34 PM »

Virus PASSWORD_VIEWER.EXE

Description: The "password_viewer.exe" virus executes during startup and cannot be easily disabled from the task manager. It shuts down your computer thru a batch file named "pc-off.bat". Surprisingly, this virus cannot be removed by known anti-malware programs but can be easily removed if done carefully on a manual way.

Removal Procedures:

1. Manual:

Here's how:

A. Turn off 'System Restore'.

Right click 'My Computer', click 'Properties', click the 'System Restore' tab, mark/check "Turn off System Restore on all drives", click Ok.

B. Restart computer in "Safe Mode" (press F2 or equivalent before the Windows bootup screen appears).

C. Now go to 'My Computer'. At the Menu bar click 'Tools', click 'Folder Options', click the 'View' tab. Scroll down and mark "Show hidden files and folders", uncheck both "Hide extensions for known file types" and "Hide protected operating system files", if a prompt appears click 'Yes', and then click 'Apply' and 'Ok' to close.

D. Open your system drive (usually drive C: ), open 'Windows', scroll down, look for and delete the following files:

password_viewer.exe
pc-off.bat


- if a prompt appears each instance, click "Delete All".

E. Click the 'Back' button then go back to 'Tools', click 'Folder Options', click the 'View' tab. Scroll down and mark "Do not show hidden files and folders", check both "Hide extensions for known file types" and "Hide protected operating system files" and then click 'Apply' and 'Ok' to close.

F. Restart your computer to normal mode and turn on System Restore back by right clicking 'My Computer', click 'Properties', click the 'System Restore' tab, unmark/uncheck "Turn off System Restore on all drives", click ok.

You can check if the virus is still there by opening the Task Manager/Processes then look for password_viewer.exe. If its not there, you just had a successful virus removal. To test to make sure your computer doesn't shutdown when executing the Command Prompt, go to Start/Run and type cmd.

2. Automatic (Thanks to AVIRA 9-Free Edition)

Avira AV Screenshot



A. First, download Avira 9

Download site 1:
Quote


(These is my personal account, tested working as of July 23, 2009)

B. Install and update your Avira online.

C. After successful installation, run a complete system scan.

D. If you are infected with the virus, the Avira will automatically disenfect the said virus.

E. Reboot (restart) the system.
Logged
The Philippine Electronics and Technology Forum
« on: October 25, 2009, 08:07:34 PM »

 Logged
amadjo01
Lead Acid Battery
*******

Pogi/Ganda Points: 14
Offline Offline

Gender: Male
Posts: 692


Meow....


« Reply #1 on: July 27, 2010, 04:12:36 PM »

sir try nyo po mag-download updated antivirus avira or avast

naencounter ko na rin po itong passwordviewer.exe

ang ginawa ko po

1.task manager> endprocess ; passwordviewer.exe
2.run>regedit> HKLM\software\microsoft\windows\currentversion\run > delete passwordviewer.exe
run>regedit> HKCU\software\microsoft\windows\currentversion\run > delete passwordviewer.exe
3.run>gpedit.msc>user config>administrativetemplates>system>prevent access to command prompt = "disabled"
4.tapos delete nyo nalang po sa command prompt kung saang directory sya nakalagay  :/
ang naging problema ko po dyan kapag ni run ko ang cmd nag rerestart, kaya kailangan muna ma end proccess
tsaka ko na po inayus yung registry values tapos gpedit para ma enable yung run,tsaka ko na po binura yung file sa command prompt!

Smiley

pero mas madali po ang mag download ng antivirus kesa isaisahin yan!!
anyways kaya na po yan ng mga updated na antivirus Wink

goodluck!!!
Logged
The Philippine Electronics and Technology Forum
   

 Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  


Related Topics
Subject Started by Replies Views Last post
virus in micrcontroller? « 1 2 3 »
Microcontroller/Microprocessor Unit Projects and Programming
servomechaniX 51 5033 Last post March 16, 2009, 04:02:21 PM
by mochini77
virus naman, from usb « 1 2 3 4 »
Culture and Lifestyle
Siramiko 64 5834 Last post September 02, 2008, 03:08:57 PM
by Lenjei
virus
Computer Software
manualsk8r 3 475 Last post May 20, 2009, 12:33:52 PM
by BroadBandAC
usb virus
Viruses, Trojan and Spyware Problems
paradox89 13 2140 Last post November 17, 2010, 06:27:36 PM
by !KuGZ$
help about this virus
General Computers and Internet Talk
bluegirl 15 1392 Last post July 06, 2009, 10:25:48 PM
by voltaman_krc
Anong Virus ito? hinde Alam ng Node anti-virus (Tinamaan ako galing sa usb)
Viruses, Trojan and Spyware Problems
Positron E+ 5 1269 Last post November 19, 2010, 11:16:44 AM
by jacks
Virus Via SMS?
Cellular Phones and Accessories
lorwin04 4 1284 Last post July 19, 2010, 01:59:40 PM
by lordemtech
Powered by MySQL Powered by PHP Powered by SMF 1.1.15 | SMF © 2011, Simple Machines Valid XHTML 1.0! Valid CSS!