Skip to main content

How to Remove pc-off.bat from your computer

Last weekend I bumped into a digicam which had a malware in it.
The malware like to shut my pc off as soon as I'm trying to access the command prompt. My antivirus was able to detect it, but was unable to delete it from my system.

So with a little research I was able to erase it completely from my system! Thank God!

I'll share to you this method, hoping it can help you too!

This is the symptom of a computer having JBLCF_Scandal.exe virus.
The virus comprises of JBLCF_Scandal.exe and pc-off.bat.

When you boot your Windows XP in Safe Mode the message appears: "Dont Worry. I will do no harm here"

The pc-off.bat contains the syntax like this”C:/path/shutdown -s -f -t 2 -c” which automatically shutdown your computer when you run the cmd.exe.

So heres the solution to this problem… just follow these simple steps that will be discussed below.

For Manual removal:

1. Upon start up... After OS loading... Go to task manager by pressing CTRL+ALT+DEL then kill (end process) JBLCF_Scandal.exe

2. Press START then at the RUN, enter REGEDIT.
Then start to EDIT the following registry entries thru regedit at start/run

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
“Userinit”=”userinit.exe,JBLCF_Scandal.exe” —> remove “,JBLCF_Scandal.exe” only… leave userinit.exe because this is used by Windows when you log-in…

[HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Explorer\Advanced]
“Hidden”=dword:00000001
“HideFileExt”=dword:00000000
“ShowSuperHidden”=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Command Processor]
“autorun”=”c:\Windows\pc-off.bat” –> remove “c:\Windows\pc-off.bat” or delete the autorun key.

3. go to your thumb drive, please use the folders view in the explorer and use the navigation panel on the left side when accessing the drives to avoid triggering the autorun… then delete autorun.inf and JBLCF_Scandal.exe

4. open notepad then type what is shown below as is…

@echo off
del /a /f c:\Windows\JBLCF_Scandal.exe
del /a /f c:\Windows\pc-off.bat
pause

then save this as pc-off remove.bat then click to run…. it will remove this annoying types of PC shut-off thing of virus…

After doing this, you may need to scan again your system using your antivirus.
I'm using AVAST to scan my system, and hey, It really works!
Labels:

Comments

Post a Comment

Popular posts from this blog

Earthquake hits Negros-Cebu Region- February 6, 2012

An earthquake hit the Negros-Cebu region on February 6, 2012 at 11:49AM, The US Geological Survey (USGS) confirmed that the Negros-Cebu region was the epicenter of this quake. The Philippine counterpart agency-Phivolcs-- that the cause of the shake was tectonic in origin with magnitude 6.9. Further, the quake has a depth of 33km, with epicenter 71 km off (44 miles) SSE (161°) of Bacolod, Negros, Philippines. ALERT . Crimonology students on guard after short moments of shock. Trembling from other areas such as Iloilo City (Intensity 5);  Kalibo, Aklan; San Jose de Buenavista and Pandan, Antique; Sta. Barbara, Iloilo; Dipolog City (Intensity 4) was also observed. This trembling sent home thousands of students after administrators announced the postponement of classes. Philvolcs warned that major damage and aftershocks are expected from the quake. Everyone is advised to take proper measures and safeguarding. In Iloilo city, students from all over the metro observed thei...
10 comments
Read more

Test Taking Strategies for Fresh Graduates

Test Taking Strategies for Fresh Graduates. How to take an occupational test? How to prepare for tests? How to answer employee questions? Tips for taking tests! These are some of the reverberating excerpts I hear a lot of times from fresh graduates of many universities. I wish to shed some light into this matter by sharing experiences I had with several multinational companies that I applied and worked for. Today, I will be speaking and sharing the wonderful sets of learning I gained to 200 graduating students of  University of Iloilo-PHINMA Education Network. I wish to be of help to these students by exposing to them the common tests that employers give, how to prepare for an examination, how to prepare for the big battle (of passing the test of the student's company of choice). This is my street-wise approach that I use and for many years have led me to join big companies. If you wish to grab a copy of this training, please leave your e-mail address by posting under the c...
8 comments
Read more

A touching letter

When you think you are too busy, hope this can remind you of something. While busy with my career, I get to talk and mingle with lovely and equally adorable couples who are about in their 60. They have one daughter, of which we are fascinated due to her nature of being the same of her parents- likeable, funny, warm and friendly. So many things to say.. I was invite by Ate Malou to fix her pc and I noticed this piece of letter on her wall and on their fridge. I'd like to share this with you. Hoping that you'll have time to read and reflect on this.
2 comments
Read more