Avast WEBforum

Other => Viruses and worms => Topic started by: Kratus on May 22, 2012, 02:04:31 PM

Title: how to remove .pif
Post by: Kratus on May 22, 2012, 02:04:31 PM

hi, what is the best way to remove pif virus ?

Title: Re: how to remove .pif
Post by: DavidR on May 22, 2012, 02:32:40 PM

There really isn't enough information as a .pif is a file and not a virus as such.

The .pif file is essentially a program installation file and it can contain anything, be it legit or malicious. So the payload can differ so there wouldn't be a specific removal process.

What is telling you that you have a pif virus ?
What is the file name and location of this detection ?

Title: Re: how to remove .pif
Post by: Kratus on May 22, 2012, 02:38:13 PM

my mother downloaded it from email  :-[, its .pif file and after open it disapeared, avast didnt find anything, task manager doesnt work. i shut the pc down and im on ntb to figure out what to do

Title: Re: how to remove .pif
Post by: true indian on May 22, 2012, 02:40:42 PM

if u are able to boot to windows then follow guide
http://forum.avast.com/index.php?topic=53253.0

attach all logs

Title: Re: how to remove .pif
Post by: Kratus on May 22, 2012, 03:10:38 PM

Quote from: true indian on May 22, 2012, 02:40:42 PM

if u are able to boot to windows then follow guide
http://forum.avast.com/index.php?topic=53253.0

attach all logs

when i boot normally, the screen becomes black with message in german (whichi dont understand very well) to pay 100 eur
so i boot in safe mode but i cant update MBAM, also i cant post any logs

Title: Re: how to remove .pif
Post by: Pondus on May 22, 2012, 06:46:48 PM

Quote

when i boot normally, the screen becomes black with message in german (whichi dont understand very well) to pay 100 eur

hmmm..... looks like you may be infected with a Trojan.Ransom

http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Trojan:Win32/Ransom.FL




malware specialists are notified

Title: Re: how to remove .pif
Post by: true indian on May 22, 2012, 06:56:57 PM

I dont get it...avast does have a detection for this here:
https://www.virustotal.com/file/cdef90f3308af14c1ddc60dd0efe031465909e99a2cc04c78f921189f64a8c00/analysis/

Title: Re: how to remove .pif
Post by: Pondus on May 22, 2012, 07:34:11 PM

Quote from: true indian on May 22, 2012, 06:56:57 PM

I dont get it...avast does have a detection for this here:
https://www.virustotal.com/file/cdef90f3308af14c1ddc60dd0efe031465909e99a2cc04c78f921189f64a8c00/analysis/

hmmm....have you heard about new version   ;)

Microsoft malware link i posted above was posted as and example/malware info..... so it does not have to be the same as that one

Title: Re: how to remove .pif
Post by: essexboy on May 22, 2012, 08:43:32 PM

If you cannot run the logs in either normal or safe mode then let me know the operating system that you are using..  We may need to make a CD or USB to get at the problem

Title: Re: how to remove .pif
Post by: true indian on May 23, 2012, 09:06:56 AM

Quote from: Pondus on May 22, 2012, 07:34:11 PM

Quote from: true indian on May 22, 2012, 06:56:57 PM

I dont get it...avast does have a detection for this here:
https://www.virustotal.com/file/cdef90f3308af14c1ddc60dd0efe031465909e99a2cc04c78f921189f64a8c00/analysis/

hmmm....have you heard about new version   ;)

Microsoft malware link i posted above was posted as and example/malware info..... so it does not have to be the same as that one

Ahh!! Found the new sample now i reported it to avast! see:
https://www.virustotal.com/file/3e3f980ab668ccde6aafee60ce16e3c35cd91e9b59bff20ce1615d5fb362a458/analysis/1337756549/