Hey i have a win32 parite and avast wont get rid of it does anyone know how to get tird of them?? or something :-\
What Operating System do you use(Win9x/XP?). Do you FAT(32) or NTFS.
If i remember correctly Pinfi/Parite infects the Explorer.exe. So it is maybe the best to use a Dos-AV for cleaning, but if you use NTFS it is a bit difficult. Maybe your Windows starts a Parite-Dropper on Startup. So tell us, what files get executed on Windowsstart. You can use MSCONFIG.exe or http://www.lurkhere.com/~nicefiles/hijackthis193.zip for that.
I don’t think Symantec has a Parite removal tool. Where did you hear about it, techie101?
However, we do have one 
Ryan, I’ll have it sent to you on Monday (see http://www.avast.com/forum/index.php?board=2;action=display;threadid=411;start=0 )
Vlk
Vlk,
Wasn’t exactly sure of which removal tools they had, but I have obtained many that I needed from them.
I should have checked first.
Sorry.
I try.
;D
Vlk,
Maybe I can make up for it?
Upon executing a file infected with W32.Pinfi, the virus will perform the following:
- Adds the registry value:
PINF
to the registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
-
Appends itself to Explorer.exe to remain memory-resident.
-
Appends itself to all the .EXE and .SCR files that it finds on all the local and mapped drives. The virus contains an algorithm to slow the infection, so the virus will only infect a few files at a time.
-
W32.Pinfi will create a tempfile in the temporary folder. It will get the temporary folder by using a Windows API. The tempfile this virus creates will always have the following name:
[3 random letters][4 random hexadecimal digits].tmp
The file it creates is a UPX packed executable file. The temporary file will be executed by the virus, and it is this file that will attempt to infect files over network shares.
Forgive Oh Great Moderator!!
:
ryan, I’ve sent the parite removal tool to your e-mail address.
Forgive Oh Great Moderator!!
Apology accepted ;D