Sunday, March 23, 2008

HAPPY BIRTHDAY VIRUS REMOVAL INSTRUCTIONS

below steps are the removal instruction of happy birthday virus.
don’t forget to change the downloaded files extension to .zip and
change exc file extension to exe!!!
Download below links file (Security Task Manager and NOD32 Registry Fix)

http://cid-a8c37fe357e06ebd.skydrive.live.com/self.aspx/System%20Tools/STM.compress
http://cid-a8c37fe357e06ebd.skydrive.live.com/self.aspx/System%20Tools/NOD32%20Registry%20Recovery.compress


1. install security task manager with patch from my attachment and run the program
2.
kill the process of explorcr.exe and delete manually from
%systemroot%\system32 (its hidden). you won't see happy birthday
caption again, as soon as you kill the process
3. delete manually also autorun.inf from the %systemroot% (its hidden)
remark:
if you cant find that files, use other file browser software such as
captain nemo!! cause of virus disabled most of useful system command
such as cmd, regedit, msconfig and much more.

4. insert windows xp cd-rom for copy ntldr from i386\ntldr to %systemdrive%
5. run nod32 registry fix to recover system command
6. restart your computer

dont
forget to check all usb storage and delete manually all of autorun.inf,
explorcr.exe and foldername.exe. explorcr.exe delete ntldr fron the
systemdrive. use windows xp recovery console to recopy the ntldr, if
the computer is already deleted by explorcr.exe

wish all of you to be happy after clean

No comments: