W32/Parite-B

Miroslav

I still can't get rid of this

I've had advice on here, from websites and done exactly what people say, but I can't get rid of it and it's affecting programs again.

Any ideas?

I use Windows ME, it finds the file and cleans but I can't permanently delete

boogiemaster

Start run and type in msconfig, look to see if there is any programs that shouldant be there on startup?
Also start run and type regedit click on Hklm software miicrosoft windows current version run and look for any programs that are not sapposed to be there.
You may have to delete Dll files becouse they are the main program start up files

Miroslav

Thanks, tried both but nothing

Really annoying, as I'm on season 2016/17 on Championship Manager

danmanchester

Just a thought...have you turned off system restore?(then running your AV software in safe mode) I'm pretty sure I've read on these threads that sometimes this is the only way to completely remove stubborn nasties BUT! and it's a big BUT you will lose all previous restore points so essential backing up is needed if going down this route. I know I had to do this last year and it worked (XP) although I'm not sure if ME system restore is the same? Hopefully some of the other techy experts on here can shed some light on this whether turning off system restore will have any beneficial effect? Good luck though!

woo

switching off system restore in ME has the same affect as in XP, but as danmanchester says you will lose all your restore points.
Think in ME you switch system restore off, reboot into safe mode do a full scan to get rid of any left over infections and boot up in normal mode.
You can then swicth system restore back on.

Miroslav

Thank You both. Now.....how do I turn system restore off? It never works on my PC anyway, so I'm not losing anything!

woo

have a look at http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239?OpenDocument&src=sec_doc_nam for easy to follow instructions.

Miroslav

Thanks. It seems it was already disabled.

Now, I have 2004 infected files

All of them are C:\ _Restore\ then a letter/number combo which is something like A0525644.cpy (numbers vary for each, but always similar)

Have option of deleting or quarantining.

What to do? Is this virus in the system restore?

woo

yeah the _restore folder is the system restore one. If system restore is switched off then you should delete them.
does seem a bit odd that the sys restore is off and the virus is in there. I do know of some that can automatically disable sys restore, not sure if this one does or not.

Miroslav

Is it safe to delete them?

I don't want my PC going even more wrong

woo

well it is windows.. so is it ever safe to do anything? ;-)

If it is in your _restore directory and your virus scanner will delete it, then i would assume it is safe.