How to Remove pc-off.bat from your computer

Last weekend I bumped into a digicam which had a malware in it.
The malware like to shut my pc off as soon as I'm trying to access the command prompt. My antivirus was able to detect it, but was unable to delete it from my system.

So with a little research I was able to erase it completely from my system! Thank God!

I'll share to you this method, hoping it can help you too!

This is the symptom of a computer having JBLCF_Scandal.exe virus.
The virus comprises of JBLCF_Scandal.exe and pc-off.bat.

When you boot your Windows XP in Safe Mode the message appears: "Dont Worry. I will do no harm here"

The pc-off.bat contains the syntax like this”C:/path/shutdown -s -f -t 2 -c” which automatically shutdown your computer when you run the cmd.exe.

So heres the solution to this problem… just follow these simple steps that will be discussed below.

For Manual removal:

1. Upon start up... After OS loading... Go to task manager by pressing CTRL+ALT+DEL then kill (end process) JBLCF_Scandal.exe

2. Press START then at the RUN, enter REGEDIT.
Then start to EDIT the following registry entries thru regedit at start/run

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
“Userinit”=”userinit.exe,JBLCF_Scandal.exe” —> remove “,JBLCF_Scandal.exe” only… leave userinit.exe because this is used by Windows when you log-in…

[HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Explorer\Advanced]
“Hidden”=dword:00000001
“HideFileExt”=dword:00000000
“ShowSuperHidden”=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Command Processor]
“autorun”=”c:\Windows\pc-off.bat” –> remove “c:\Windows\pc-off.bat” or delete the autorun key.

3. go to your thumb drive, please use the folders view in the explorer and use the navigation panel on the left side when accessing the drives to avoid triggering the autorun… then delete autorun.inf and JBLCF_Scandal.exe

4. open notepad then type what is shown below as is…

@echo off
del /a /f c:\Windows\JBLCF_Scandal.exe
del /a /f c:\Windows\pc-off.bat
pause

then save this as pc-off remove.bat then click to run…. it will remove this annoying types of PC shut-off thing of virus…

After doing this, you may need to scan again your system using your antivirus.
I'm using AVAST to scan my system, and hey, It really works!

Comments

Earthquake hits Negros-Cebu Region- February 6, 2012

An earthquake hit the Negros-Cebu region on February 6, 2012 at 11:49AM, The US Geological Survey (USGS) confirmed that the Negros-Cebu region was the epicenter of this quake. The Philippine counterpart agency-Phivolcs-- that the cause of the shake was tectonic in origin with magnitude 6.9. Further, the quake has a depth of 33km, with epicenter 71 km off (44 miles) SSE (161°) of Bacolod, Negros, Philippines. ALERT . Crimonology students on guard after short moments of shock. Trembling from other areas such as Iloilo City (Intensity 5); Kalibo, Aklan; San Jose de Buenavista and Pandan, Antique; Sta. Barbara, Iloilo; Dipolog City (Intensity 4) was also observed. This trembling sent home thousands of students after administrators announced the postponement of classes. Philvolcs warned that major damage and aftershocks are expected from the quake. Everyone is advised to take proper measures and safeguarding. In Iloilo city, students from all over the metro observed their disaste

Electronics Engineers in Western Visayas

The building code of the Philippines under PD1096 has been amended under the house bill (HB) 2836 in relation to the Republic Act (RA) 9292 (Electronics Engineering Law of 2004). Image borrowed from http://www.aguileon.com/ Referring to PD 1096, The said amendments included under Rule 1, Sec.103 the additional scope and application of the code which states "The scope of this IRR shall cover the following disciplines: architectural, civil/structural, electrical, mechanical, sanitary, plumbing and electronics ". My stake to this amendment is that it gives additional force to the weak power of the electronics engineers in the country, particularly here in the Visayas. The common misnomer to the old building code is that the scope of the structured cabling, telephony and other electronics equipment such as but not limited to fire alarm system and CCTV, is attributed to electrical engineers. Although there are some similarities in the properties of the said devices and e

Test Taking Strategies for Fresh Graduates

Test Taking Strategies for Fresh Graduates. How to take an occupational test? How to prepare for tests? How to answer employee questions? Tips for taking tests! These are some of the reverberating excerpts I hear a lot of times from fresh graduates of many universities. I wish to shed some light into this matter by sharing experiences I had with several multinational companies that I applied and worked for. Today, I will be speaking and sharing the wonderful sets of learning I gained to 200 graduating students of University of Iloilo-PHINMA Education Network. I wish to be of help to these students by exposing to them the common tests that employers give, how to prepare for an examination, how to prepare for the big battle (of passing the test of the student's company of choice). This is my street-wise approach that I use and for many years have led me to join big companies. If you wish to grab a copy of this training, please leave your e-mail address by posting under the c

channel[van]

Search This Blog