Need nelp getting rid of W32/pate.b

squishy crayons · May 5, 2006

I have this virus called W32/pate.b (parite.b, pinfi.b) I ran a scan with McAfee VirusScan and cleaned some 800 files.

Then I went to the registry key PINF at

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer

and deleted PINF.

After rebooting PINF is still there. How can I delete PINF completely?

NOTE: I have a network of three computers and C: is shared on all of them, do I have to remove the virus from the other two computers as well?

Thanks

-SC

chaslang · May 5, 2006

Well since we do not know anything about your PC (like which OS they are even running), or if you are logged on with Administrator priviledges, or which tool you are using to to delete the registry key, or whether you have any other infections. I would have to ask that you run our standard cleaning procedures below. However, you could try taking ownership of the registry key and then deleting it. But again, I don't know what OS you have so that may not be possible.

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)

Bitdefender

Panda Scan

HijackThis

.

chaslang · May 5, 2006

I forgot to address you question about the network. Yes, your other PCs could be infected. McAfee even states this in their info on this infection. The below is from McAfee.

Infected systems should be removed from the network and repaired prior to placing them back on to the network. Failure to do so can results in further infections.

Note: The UPX-packed dropped DLL is injected into the EXPLORER.EXE process for the virus to remain memory resident. Cleaning involves the unloading of this DLL from EXPLORER, which requires the 4.2.60 engine (or greater). A reboot may be required after the .dll is removed from explorer.exe.

As this threat seeks open shares, turn off full share to your system. If you have to use shares, use password protection to avoid being a future target.
Click to expand...

squishy crayons · May 5, 2006

I'm running on Windows XP with an Administrator's account. I have followed all the steps in the tutorials from McAfee and Symantec and updated all of my AntiVirus software.

chaslang · May 5, 2006

squishy crayons said:

I'm running on Windows XP with an Administrator's account. I have followed all the steps in the tutorials from McAfee and Symantec and updated all of my AntiVirus software.
Click to expand...

You need to run our procedure given in my first message. And did you see my second message post while you were posting.

chaslang · May 5, 2006

Something that may be useful is the below tool. Make sure you follow their directions for using it:

http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=13676

Log in or Sign up

Need nelp getting rid of W32/pate.b

squishy crayons Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

squishy crayons Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Log in or Sign up

Need nelp getting rid of W32/pate.b

squishy crayons Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

squishy crayons Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Useful Searches