Log in

View Full Version : Parite.B virus


randy
April 14th, 2010, 15:40
Please can someone help me in programming a routine to detect the Parite.B virus , in C or pascal if possible ....

thank you .

Kayaker
April 14th, 2010, 23:55
That's a bit of a tall order isn't it? I mean, what exactly is it you're asking or expecting?

If it's the Parite B I see from Google, it's pretty old therefore must be detectable by all the major AV's, and there seems to be manual removal instructions around as well.

If you've already got infected exe or scr files then you need to examine them and come up with some heuristic identifier or something, have you looked into that yet?

Evilcry, one of our members here, recently created a detailed blog post about the virus you should read, if it's the same one you have in mind.

Win32.Parite.B Unpacking and Anatomy Reversing and Network Analysis

http://www.offensivecomputing.net/?q=node/1533


You need to give more information if you're expecting any useful assistance. Do you have a sample? Are you infected? Have you analysed the malware and what are your conclusions? What kind of "routine" are you trying to develop - memory scan of resident process, confirmation of infected files,...?
A little more info please.