# How do I remove the virus from this file?

**URL:** <https://boards.straightdope.com/t/how-do-i-remove-the-virus-from-this-file/194669>\
**Category:** Factual Questions\
**Created:** [August 12, 2003, 4:28pm UTC](https://boards.straightdope.com/t/how-do-i-remove-the-virus-from-this-file/194669 "2003-08-12T16:28:10Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hugh\_Jass](https://avatars.discourse-cdn.com/v4/letter/h/4da419/32.png) [@Hugh\_Jass](https://boards.straightdope.com/u/Hugh_Jass)\
**Post date:** [August 12, 2003, 4:28pm UTC](https://boards.straightdope.com/t/how-do-i-remove-the-virus-from-this-file/194669/1 "2003-08-12T16:28:10Z")

</div>

Okay, I finally got around to buying some virus protection software (Norton SystemWorks) and utilities for my computer. I ran the virus check and found about 500 files infected with the win32.pinfi virus. I was able to clean/fix 499 of them. The last file infected with the virus is winlogon.exe. Access to the file is denied and Norton is unable to fix the file.

Does anyone have any ideas on how I can fix this?

---

<div class="post-metadata">

**Author:** ![Hugh\_Jass](https://avatars.discourse-cdn.com/v4/letter/h/4da419/32.png) [@Hugh\_Jass](https://boards.straightdope.com/u/Hugh_Jass)\
**Post date:** [August 13, 2003, 5:04pm UTC](https://boards.straightdope.com/t/how-do-i-remove-the-virus-from-this-file/194669/2 "2003-08-13T17:04:10Z")

</div>

Hallooo! Anyone?

Bueller?

Bueller?

Bueller?

---

<div class="post-metadata">

**Author:** ![APOC](https://avatars.discourse-cdn.com/v4/letter/a/5f8ce5/32.png) [@APOC](https://boards.straightdope.com/u/APOC)\
**Post date:** [August 13, 2003, 6:15pm UTC](https://boards.straightdope.com/t/how-do-i-remove-the-virus-from-this-file/194669/3 "2003-08-13T18:15:08Z")

</div>

Yeah ,

Try coming up in safe mode ans scan now.  
Also

Regedit  
HKEY\_CURRENT\_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer

delete PINF

---

<div class="post-metadata">

**Author:** ![Hugh\_Jass](https://avatars.discourse-cdn.com/v4/letter/h/4da419/32.png) [@Hugh\_Jass](https://boards.straightdope.com/u/Hugh_Jass)\
**Post date:** [August 15, 2003, 6:02pm UTC](https://boards.straightdope.com/t/how-do-i-remove-the-virus-from-this-file/194669/4 "2003-08-15T18:02:18Z")

</div>

> [@](#):
>
> \*Originally posted by APOC \*  
> \*\*Yeah ,
> 
> Try coming up in safe mode ans scan now.  
> Also
> 
> Regedit  
> HKEY\_CURRENT\_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
> 
> delete PINF \*\*

These didn’t work, but thanks anyway.

---

<div class="post-metadata">

**Author:** ![absoul](https://avatars.discourse-cdn.com/v4/letter/a/bc8723/32.png) [@absoul](https://boards.straightdope.com/u/absoul)\
**Post date:** [August 16, 2003, 3:58am UTC](https://boards.straightdope.com/t/how-do-i-remove-the-virus-from-this-file/194669/5 "2003-08-16T03:58:28Z")

</div>

You need to follow the removal directions from symantec…

[W32.Pinfi removal](http://securityresponse.symantec.com/avcenter/venc/data/w32.pinfi.html)

Oh, and make sure that if you are hooked to a network you disconnect each unit and clean them independently.

---

<div class="post-metadata">

**Author:** ![APOC](https://avatars.discourse-cdn.com/v4/letter/a/5f8ce5/32.png) [@APOC](https://boards.straightdope.com/u/APOC)\
**Post date:** [August 17, 2003, 11:01am UTC](https://boards.straightdope.com/t/how-do-i-remove-the-virus-from-this-file/194669/6 "2003-08-17T11:01:42Z")

</div>

> [@](#):
>
> \*Originally posted by absoul \*  
> \*\*You need to follow the removal directions from symantec…  
> \*\*

Which essentially says …

> [@](#):
>
> \*Originally posted by APOC \*  
> \*\*Yeah ,
> 
> Try coming up in safe mode ans scan now.
> 
> Also
> 
> Regedit  
> HKEY\_CURRENT\_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
> 
> delete PINF  
> \*\*

How about this

Click Start, and then click Run. (The Run dialog box appears.)  
Type regedit

Then click OK. (The Registry Editor opens.)

Navigate to the key:  
HKEY\_LOCAL\_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run  
In the right pane, delete the value:  
“Windows Logon Application”="%Windir%\winlogon.exe"  
Exit the Registry Editor.