Jump to content
kamiran.asia

Cleaning will cause File Corruption Win32/Parite.B

Recommended Posts

Hi All , Wish u Nice Time .

Here is 3 Files that are Printer Drivers that infected with Win32/Parite.B virus :

https://we.tl/t-zVcpNWHi9n

Log
D:\Inprogress\Cleaning\Software\Software\BT101_SR4_2961_UL_Honeywell.exe - Win32/Parite.B virus - cleaned

BT101_SR4_2961_UL_Honeywell.exe  Size is 180 Mb , After Cleaning 1.41 MB  😐

Same for 3 other infected exe files , We Try cleaning by Other Vendor and the result is Clean file with 180 MB Size.

It seems that there is a problem in cleaner module.

 

Share this post


Link to post
Share on other sites

It could be that the virus infected the file improperly, causing it to be damaged irreversibly. Please supply a couple of such samples to samples[at]eset.com, ideally in pair with their original uninfected variants.

Share this post


Link to post
Share on other sites
Posted (edited)
9 hours ago, kamiran.asia said:

D:\Inprogress\Cleaning\Software\Software\BT101_SR4_2961_UL_Honeywell.exe - Win32/Parite.B virus - cleaned

BT101_SR4_2961_UL_Honeywell.exe  Size is 180 Mb , After Cleaning 1.41 MB  😐

Same for 3 other infected exe files , We Try cleaning by Other Vendor and the result is Clean file with 180 MB Size.

Or ………. The other AV solution didn't actually "clean" the files since before and after file sizes are identical.

-EDIT- Appears that .exe is indeed approx. 180 MB: https://www.reasoncoresecurity.com/bt101_sr4_2961_ul_honeywell.exe-987c1e38f192b1be390e5c46b61309b99d8c1f4e.aspx

Edited by itman

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...