Alias:PE_PARITE.A (Trend), W32.Pinfi (Symantec), W32/Parite-B (Sophos), W32/Parite.B (F-Prot), W32/Parite.B (Panda), W32/Pate.a, W32/Pate.b.dll, W32/Pate.b.tmp, Win32.Parite.b (AVP), Win32.Pinfi.A (CA)
Type:Worm 
Size:177 kB 
Origin: 
Date:00-00-0000 
Damage:Spreads over shared network resources. 
VDF Version:  
Danger:Low 
Distribution:Low 

DistributionThe worm inserts an UPX packed executable file in the user's directory and opens it.
This is a DLL 176,128 Bytes file with a random name and .TMP extension.
This file infects EXPLORER.EXE program, thus the virus being saved in memory.

Technical DetailsW32/Partie.B attaches PE EXE and SCR files in Windows directory and in its subdirectories. It does not keep its original size.

The worm makes the following registry entry: HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Explorer\PINF
Some applications can not be restored after affected by the virus.
설명 삽입자 Crony Walker   2004년 6월 15일 화요일

뒤로 . . . .

© 2013 Avira Operations GmbH & Co. KG. All rights reserved.

내 계정

https:// 이 창은 보안을 위해 암호화되었습니다.