win32/parite

sr71000 · October 23rd, 2005, 10:35 PM

hey..my friend has that worm and her laptop is all messed up. I can't just find and delete the freaking virus because it infects every exe file on the laptop and it's infected photoshop, frontpage, and a few more key programs she has. She'd be better off just reformatting than deleting all these programs and reinstalled. any ideas guys? I tried the removal tool by avast and it didn't find anything...i think it's a new strand

she got it through a self sending link in aim as far as she knows!

EXreaction · October 23rd, 2005, 10:45 PM

Try the avast boot scan.

MachTach · October 24th, 2005, 11:48 AM

I guess I don't understand. If it's malicious and observable for infecting multiple programs, why not delete it and manually pull apart its bad registry keys, etc until you have it functional? There's only so many places it can "burrow". REGEDIT not helpful?

sr71000 · October 25th, 2005, 01:07 AM

it attaches itself to the beginning of every exe file it can slowly......well this customer has had this for a while.....i found almost 100 instances of the virus in the computer and avg only could heal 6 in safe mode!! lol I think it's gonna take a special program to get rid of this and it hadn't even hit program files yet! lol. The problem is by getting rid of everything this has infected I'd essentially be starting from scratch anyways...If i'm going to do that, it'd be quicker for me to just back up all her crap and just reformat and reinstall everything

this thing has infected EVERYTHING!!! LOL i'll bet there are over 1000 exe files i'd have to delete.....atleast (it infects .exe and .scr!)

i'm not sure if it's parite A B or C

http://www.pandasoftware.com/virus_i...s=18181&sind=0

Beemer · October 25th, 2005, 02:26 AM

http://securityresponse.symantec.com...w32.pinfi.html

MachTach · October 25th, 2005, 11:20 AM

Wow. Your friend just kinda learned to live with the malfunction, eh? I'd backup my data on a removable disk and wipe it all clean. Nasty.

sr71000 · October 25th, 2005, 03:28 PM

hey beemer...thanks for the link..just wanted to update everyone and let me know i'll be testing that out today most likely. do you know if i can just delete that registry key?

sr71000 · October 26th, 2005, 02:02 AM

i'm using sfc /scannow and replacing a bunch of files (probably 30 or 40...lol) but every single one that it finds, i have to click retry because it's an old laptop and the stupid cd doesn't spin up fast enough...lol stupid laptops!

/edit forgot to say thanks for the link beemer...used it to remove the main parts of the virus and hopefully they stay away...i'm running sfc /scannow and then I wanted to do a repair install but I can't...cus stupid girlie has a corporate license on this laptop with no sticker anywhere (i wonder why ::looks around:

hey...as long as it's not my laptop..oh well. I go the legal way!! lol.