Windows cannot find 'x:\WinClon\Manager1.exe'. what is mean??

This is a virus activity which prevents to use command prompt on the infected machine, this virus is called PC-OFF.bat trojan which turns off or shutdown your computer when ever you try to use command prompt by any means.
The infected computer restarts on opening command prompt.
This PC-OFF.bat virus creates the following files

• • password_viewer.exe
  • bar311.exe
  • photo.zip.exe
  • pc-off.bat

at the following locations

• • c:\windows\bar311.exe
  • c:\windows\password_viewer.exe
  • c:\windows\photo.zip.exe
  • c:\windows\pc-off.bat

Another variant of the this virus is recognized as bar311.exe virus A.K.A. winzip123 which will have almost the same symptoms and when ever you boot your Windows Xp computer in safe mode it will say a message Thank You!!! Password:Winzip123
Let's find out the fix to remove this shutdown virus completely from computer.
Fix:
1. Open Task Manager by pressing Ctrl+Shift+Esc, click the process tab and locate the process named 'password_viewer.exe' or 'bar311.exe' or 'photo.zip.exe' one by one and right click and select 'End Process'
2. Open Start Menu >> Run, type regedit and press Enter key or OK button
3. Navigate to the following path
HKEY_LOCAL_MACHINE \ SOFTWARE \ MICROSOFT \ WINDOWS NT \ CURRENTVERSION \ WINLOGON
4. Locate the key named Userinit in right pane
"Userinit" = C:\WINDOWS\system32\userinit.exe,bar311.exe"
double click and remove the text 'bar311.exe' from the above
OR
"Userinit" = C:\WINDOWS\system32\userinit.exe,photo.zip.exe"
double click and remove the text 'photo.zip.exe' from the above
OR
"Userinit" = C:\WINDOWS\system32\userinit.exe,password_viewer.exe"
double click and remove the text 'password_viewer.exe' from the above
Note: Please make sure after editing the above Userinit key value it should be only
C:\WINDOWS\system32\userinit.exe (as shown in the image below)

5. Navigate to the following path now
HKEY_CURRENT_USER \software\microsoft\windows\currentversion\explorer\advanced
Change Value of the following registry Key's :-
"Hidden"=dword:00000001 (1) - Change to '1'
"HideFileExt"=Dword:00000000 (0) - Change to '0'
"ShowSupperHidden"=Dword:00000001 (1) - Change to '1'
6. Navigate to the following registry path
HKEY_CURRENT_USER \software\microsoft\Command Processor
Find the registry key named autorun, right click and delete this key. The value of the key would be autorun=c:\windows\pc-off.bat

7. Open notepad and type the following commands
@echo off
del /a /f c:\windows\bar311.exe
del /a /f c:\windows\password_viewer.exe
del /a /f c:\windows\photo.zip.exe
del /a /f c:\windows\pc-off.bat
pause
Save it as remove-pc-off-virus.bat and double click to run it. Or just download this batch file here and run it by double click.
8. Search for bar311.exe OR password_viewer.exe OR photo.zip.exe OR pc-off.bat and delete these files where ever found on your computer.
9. That's it, Enjoy the pc off virus is now completely removed from your computer.

What is the .exe file for? I mean what are you trying to do

defrag first

Sounds like u got a virus. My suggestion is don't open up any mail or any sites that your not sure of.

Always be careful when you come to doing such things. I think you should try and recovery to factory default.

Make sure ur using windows xp
and hardware minimum requirement
then also same problam it mean ur exe is currrept try to replace ur exe file

If you have an option to run check disk then you should let it run. If not there should be a way to access it. For additional help could you please provide the version of windows that you are running?

See post #3
http://newyork.ubuntuforums.org/showthread.php?t=1648714

Hi,

Your post ..."C:\WINDOWS\VM_STI.EXE...clean this from my pc..." would mean remove/delete.

Initially, pls try to:

• Uninstall the Philips SPC 200NC;
• Run in Safe mode and delete C:\WINDOWS\VM_STI.EXE;
• goto Start, Run, type "msconfig", click on Startup, uncheck reference(s) to C:\WINDOWS\VM_STI.EXE;
• open Windows Task Manager, Applications (or Processes), highlight VM_STI.EXE, click on End Process button.

Hope this be of initial help/idea. Pls post back how things turned up or should you need additional information.

Good luck and kind regards. Thank you for using FixYa.