1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Problem removing Parite.B virus. Can anyone help?

Discussion in 'Malware and Virus Removal Archive' started by markjrees, 2007/09/19.

  1. 2007/09/19
    markjrees

    markjrees Inactive Thread Starter

    Joined:
    2003/09/02
    Messages:
    49
    Likes Received:
    0
    I have a client who has a couple of computers infected with the Parite.B virus.

    Their anti-virus software (Panda WebAdmin) picks up the infected exe files and manages to clean them ok.

    The problem is there's something causing the virus to keep re-infecting the exe files. I've tried a couple of removal tools but they dont actually get rid of the actual virus itself - they too just clean the infected files.

    If anyone can point me in the direction of a way of removing whatever keeps on re-infecting the files it'd be much appreciated.

    I'm guessing it's going to be a registry key or something - unfortunately the anti-virus software just seems to clean the infected files - rather than fixing the root cause as well.

    Thanks in advance.
     
  2. 2007/09/19
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Hi Mark,

    Reset the HOSTS file to default. Easily done with the HostsXpert. Kill explorer.exe and clear all temp files. Recommend using ATF Cleaner by Atribune to do that.

    Check for and delete the following registry key.

    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\PINF

    Reboot to safe mode and scan with panda.

    All machines should be disconnected from the network and not reconnected until after cleaning. This infection spreads to networks shares, in an attempt to infect all exe and scr files. All Network machines should be considered infected and run through the cleaning process.

    http://www.eset.com/pedia/virusy/win/win32/pariteb.htm
     

  3. to hide this advert.

  4. 2007/09/20
    markjrees

    markjrees Inactive Thread Starter

    Joined:
    2003/09/02
    Messages:
    49
    Likes Received:
    0
    thanks very much. i'll give this all a go and report back.
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.