password viewer.exe

Here’s how:

stop the virus from running

1. run the Task Manager by pressing CTRL + ALT + DEL
2. click on the processes tab on the Task Manager
3. end the following processes: password_viewer.exe
4. close the Task Manager window

edit the Windows Registry

1. click Start
2. click run
3. type “regedit” in the textbox
4. click Ok
5. go to this path: HKEY_LOCAL_MACHINE\SOFTWARE \Microsoft\WindowsNT\CurrentVersion\Winlogon
6. On the right side, look for userinit
7. right click on userinit and click modify
8. you will notice that the value in the text box is userinit.exe, bar311.exe or userinit.exe, password_viewer.exe
9. delete password_viewer.exe, BUT leave userinit.exe

delete the registry entry that causes windows to shutdown

1. In the Registry Editor, go to this path: HKEY_CURRENT_USER\Software\Microsoft\Command Processor
2. delete the autorun key

delete the autorun.inf file

1. Open a notepad window
2. Type this in the notepad:

@echo off

c:

attrib autorun.inf -h -r -s

del autorun.inf -h -r -s

d:

attrib autorun.inf -h -r -s

del autorun.inf -h -r -s

del /a /f c:\Windows\password_viewer.exe

del /a /f c:\Windows\pc-off.bat

save the file as "whateva.bat"

run the "whateva.bat"