|REMOVAL INSTRUCTION OF HAPPY BIRTHDAY VIRUS||
Friday, February 22. 2008
i got this from one of my friend and i hope that is useful for everybody
. . .
don’t forget to change the downloaded files extension to .zip and
change exc file extension to exe!!!
Download below links file (Security Task Manager and NOD32 Registry Fix)
1. install security task manager with patch from my attachment and run the program
kill the process of explorcr.exe and delete manually from
%systemroot%\system32 (its hidden). you won’t see happy birthday
caption again, as soon as you kill the process
3. delete manually also autorun.inf from the %systemroot% (its hidden)
if you cant find that files, use other file browser software such as
captain nemo!! cause of virus disabled most of useful system command
such as cmd, regedit, msconfig and much more.
4. insert windows xp cd-rom for copy ntldr from i386\ntldr to %systemdrive%
5. run nod32 registry fix to recover system command
6. restart your computer
forget to check all usb storage and delete manually all of autorun.inf,
explorcr.exe and foldername.exe. explorcr.exe delete ntldr fron the
systemdrive. use windows xp recovery console to recopy the ntldr, if
the computer is already deleted by explorcr.exe
wish all of you to be happy after clean