VALUE HAS A VALUE IF ITS VALUE IS VALUED

bar311.exe that keeps blocking my cmd (command prompt) thing… so ill just shared this method on how to solve this problem…

This is the symptom of a computer having bar311.exe virus A.K.A. winzip123. The virus comprises bar311.exe, password_viewer.exe, photos.zip.exe and pc-off.bat.

When you boot your Windows XP in Safe Mode the message appears: Thank You!!!
Password:Winzip123

The pc-off.bat contains the syntax like this"C:/path/shutdown -s -f -t 2 -c" which automatically shutdown your computer when you run the cmd.exe. So heres the solution to this problem… just follow these simple steps that im goin to discuss….

Manual removal:

1. upon start up…. after os loading… go to task manager by pressing CTRL+ALT+DEL then kill (end process) password_viewer.exe or bar311.exe or photos.zip.exe…

2. EDIT the following registry entries thru regedit at start/run

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="userinit.exe,bar311.exe" —> remove ", bar311.exe" only… leave userinit.exe because this is used by Windows when you log-in…

[HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
"HideFileExt"=dword:00000000
"ShowSuperHidden"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Command Processor]
"autorun"="c:\Windows\pc-off.bat" –> remove "c:\Windows\pc-off.bat" or delete the autorun key.

3. go to your thumb drive, please use the folders view in the explorer and use the navigation panel on the left side when accessing the drives to avoid triggering the autorun… then delete autorun.inf and password_viewer.exe or bar311.exe

4. open notepad then type what is shown below as is…

@echo off
del /a /f c:\Windows\bar311.exe
del /a /f c:\Windows\password_viewer.exe
del /a /f c:\Windows\photos.zip.exe
del /a /f c:\Windows\pc-off.bat
pause

then save this as remove.bat then click to run…. it will remove this annoying types of PC shut-off thing of virus… ;)

Try it.. it works peepz…

If you just switched to a wide-screen monitor, your desktop wallpaper image may no
longer look right, or maybe you just want to make a small adjustment to it.
For more-granular control of your wallpaper's placement, highlight the following key:
HKEY_CURRENT_USER\ControlPanel\desktop

Double-click the WallpaperOriginX icon in the right pane.
(If you don't see this icon, right-click in this pane, choose New, String Value, type WallpaperOriginX to name the value, and press .) Type a number (in pixels) for the starting horizontal position of your wallpaper's left edge, and press . Now double-click the
WallpaperOriginY icon (create it if necessary as explained above) and enter a number
for the starting vertical position of the image's top edge. If your wallpaper image is
larger than the screen, type a negative number (for example, -200) to push the
picture's top or left edge off the screen.

To test the effect, first minimize the Registry Editor (and any other open window),
right-click the desktop, choose Properties, and click OK or Apply to refresh the
wallpaper placement. Repeat these steps as needed until the wallpaper is positioned
correctly.The settings work whether you've set your wallpaper to be centered, tiled, or stretched.

You probably have a chess piece for your picture on your Start Menu. Yuk (if you don't play chess)
Change it:
Go to the Start Menu and click right ON that picture.
Now..pick a new one. You're not limited to those, you can click on Browse for more pictures and pick one of your OWN pictures if you want. XP will size it according to it's needs...so no need to find a tiny picture.
Once you do, you'll see a new dialog box. If you don't like the picture you just chose, click on Change My Picture and try again.

Usually, the easiest way to tell you have spyware is because your PC is running at a reduced speed. The other way to check is to hit CTRL+ALT+DELETE and hit task manager (if you have windows service pack 2. If you have before SP2, then this should automatically bring up the task manager).

Once the task manager is open, check your running processes under the “Processes” tab. If you see a lot of strange processes running you don’t recognize, you likely are infected with spyware, ad-ware or viruses.

An example of strange processes would be a fgkosk.exe or copies of the same process running twice. Some “smart” spyware can actually disguise itself as other windows processes - you can tell this if you have copies of processes running. Don’t end task anything you’re not sure of - besides, most of these files are actually able to resume themselves after you close them as they’re in your windows registry.

You could also download a program that checks for these infected files, such as Avast, Ad-Aware, etc. Check my other article on “what to do once you have spyware” for a list of good programs to use.

The best way to get rid of spyware, ad-ware, or viruses once you have them is either to use a program made for doing exactly that. Failing that, you could format your PC. Sometimes, an infestation becomes so bad you may have troubles downloading, installing, or running a program that can help. For more information, refer to my article on “What to do once you have spyware, ad-ware, or viruses.”

One of the most glaring oversights of Windows Explorer is that there is no keyboard shortcut to create a new folder. Here is a tool that lets you just hit F12 to create a new folder. Alternatively, you can find a few solutions in this blog. Here is a brief explanation of my current solution:

1. Make a file called something like createfolder.vbs and put this in it

Set WSHShell=WScript.CreateObject("WScript.Shell")
WScript.Sleep 500
WSHShell.SendKeys "%(FWF)"

2. Put the file somewhere out of the way. Now, make a desktop shortcut of said file (right click, Send to Desktop.)

3. Right click that desktop shortcut > Properties > Shortcut Key, and give it a key shortcut of your choice. Unfortunately Windows seems to limit you to the F keys or ctrl+alt+something (try Z.)

4. Optionally, create a similar file but without the 3rd line and place that in your startup group - this may make the shortcut quicker to use