Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I have the Win32 Parite on my computer.
Its so bad that I can't even log on to my
computer without it logging me back out
in a matter of seconds. Is there any-way I
can get rid of it without having to format
my computer, and without having to log
in? -Jayrobbins

Win32.Parite.A/B/C (Information from BitDefender)
Symptoms:Sensible decrease in hard-drive free space;
A file about 180K, executable in temporary folder written in Borland C++;
Most exe files have over 200K in size.
Technical description:
The virus is a file infector that is composed of two parts: a small stub written in Assembler, appended to the files infected that decrypts the main virus body, also appended to the infected file. The main virus body is a PE file written in Borland C++ that it's dropped in the Windows\TEMP directory (or whatever location temporary files have on your system).The virus infects PE files, and searches for files with *.exe and *.scr extensions, on local drives, network drives and network shares on local network. Because the virus appends to every infected file the main body, which is ~180K in size, there should be a visible decrease in free space on your volumes. The virus doesn't show it's presence in any way, and does not use email for spreading.
Versions A and B are mostly the same, while version C uses a somewhat tricky method of encrypting the original PE file's entry point. Infected files have the last section's name consisting of 3 randomly chosed letters followed by a non-printable character.
If in your exe files the last section name is .jbd or .xgt or something like that, then it's probably a file infected with Parite.
The virus does not damage the file it infects.
Removal tool:
Download Removal Tool from BitDefender's website
Start your computer in safe mode:
To use the F8 method
Use this method only if Windows XP is the only operating system installed on your computer.
Start Windows, or if it is running, shut Windows down, and then turn off the computer.
Restart the computer. The computer begins processing a set of instructions known as the Basic Input/Output System (BIOS). What is displayed depends on the BIOS manufacturer. Some computers display a progress bar that refers to the word BIOS, while others may not display any indication that this process is happening.
As soon as the BIOS has finished loading, begin tapping the F8 key on your keyboard. Continue to do so until the Windows Advanced Options menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
Using the arrow keys on the keyboard, scroll to and select the Safe mode menu item, and then press Enter.Scan your system with the tool you downloaded.
Tank863

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |