WIN32/PARITE/PINFI

by ELRIK May 31, 2005 12:25AM PDT

On a computer scan at te first 3 minutes of scanning (21Gcool smiley there were about 60 EXE infected by WIN32/PARITE. I paused the scan and I ckecked these files. No more hey working and all the icons have changed the square exe icon. AVG had locked them I think.

I didn't left the scan to end. I stopped and I did a system restore. Windows hen said that there is nothing to restore. Okay this woulb be right bacause the restore point was a few hours before. No new files, no new software. But what about the exe files that changed???
I checked the files, they seem to be ok. With their icons back and fully operational. But each one of them in the end of the name now had the number 2. E.g. mame.exe renamed to mame(2).exe That means restore worked but why it said that no changes as tere was nothing to restore???
I ran two of them (installers_zip extractors as it was the one I know for sure cause of two friends experience with a copy of the specific cd that had the virus) and then scan again giving a special eye to all the exe files. No virus found.

I also found a registry key PINFI at
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer

I deleted this, of course.

Am i safe now???
Or should i leave the scan before the restore to end so that to lock every infected file and then with the restore to have back te original uninfected files???
I'm afraid the case that there were many other infected exe and now after the restore somehow the virus trick AVG and they just waiting for an installation of them to be spread again???
Is there any secure solution???

Thanks for your time. Sorry for my english.

Discussion is locked

I realise that English isn't your first language and it is very difficult to be precise in a language you are not familiar with, but I am not really sure what is happening here.

You say you ''paused'' the scan and checked some .exe files? I don't think that was a good idea. Also, I am not sure that deleting a key from the Registry without knowing what you're doing is wise either.

I think you must continue the scan, (or start again if you have cancelled out of it). Trust AVG to find and deal with the viruses you seem to have. But before you do, make sure AVG's virus definitions are up to date first.

Also, as you seem to have so many infections, I think you need other protection as well. Do you run a firewall? If not, download and install ZoneAlarm's free firewall from http://www.zonelabs.com.

Then you need anti-spyware and anti-adware programs, as follows;

1] An anti-adware program. Free program is Ad-Aware SE Personal from http://www.lavasoftusa.com

2] Two spyware programs;

Spybot Search and Destroy from http://www.safer-networking.org/

and SpywareBlaster from http://www.javacoolsoftware.com/spywareblaster.html

I am also trying out Microsoft's new, (or newly acquired), AntiSpyware software in addition to all the above. It seems ok so far. Available for free from http://www.microsoft.com

If you decide to use these, make sure that, once they are installed, you open them and check for updates on each before scanning.

Good luck

Mark

WIN32/PARITE/PINFI

CNET Forums

Other Forums

Forum Info