Page 2 of 2
Posted: Sun May 07, 2006 8:07 pm
by blueznl
josku_x wrote:I know it has bad sectors. I use Diskeeper Lite to defrag my hd, and I defrag it every week, and Diskeeper always says that there were sectors that it wasn't able to defrag. So I had always 10% red in my Hd.
EDIT: My kids aren't fault on everything, but they were fault that the computer got infected with viruses.
the moment errors are a regular event, you should IMMEDIATELY make a backup and get a new drive!
brrr
i backup to memory stick, to external hdd, to a second internal hdd, and now and again to dvd (in case lightning strikes) which i store at my parents place, and recently i took a hardcopy print of the entire harddisk and had it engraved in pure granite...
well, perhaps not the hardcopy thing, but the rest i do
Posted: Sun May 07, 2006 9:25 pm
by josku_x
Thanks to all suggestions. I could remove the virus and now I can access the drive easily as a slave. Now it doesn't give the CRC error. Thank you very much!
THe only problem is that all text and document files have been scrapped up. So my PB sources look very odd.
Here's an example:
I had OpenConsole() in one of my sources, but when I open it now, PB shows le)snoCpen(Oo I don't know why it does this. I also tried to open the PB files in Notepad, same result. All my other documents as well (HTML pages, PHP sources) have been scrapped up. I don't know any reason to this. THe only explanation to this may be because of the restorator I used.
However, I got my drive accesible again, so thanks to everybody.
Posted: Sun May 07, 2006 10:14 pm
by Joakim Christiansen
THe only explanation to this may be because of the restorator I used.
Or the virus did this to fuck things up!
Posted: Mon May 08, 2006 11:10 am
by Inf0Byt3
No, i think it's not the virus.
Name: Parite virus
Also known as: Pinfi, Pate, Win32.Parite.a, W32/Pate.a, W32.Pinfi, Win32.Pinfi.A, PE_PARITE.A, W32/Parite-A, Win32/Parite.A
Type: Memory-resident polymorphic file infector
Affects: EXE and SCR files on Windows 32-bit platforms
Discovered: October 15, 2001
Description: There are two viruses involved with a Parite infection. Parite.A drops Parite.B as a dll to the Windows Temp directory, designating a filename based on the current system time (at infection). The filename has the following format:
[3 letters][4 hex characters].tmp
Parite.A then invokes the INITIATE function within Parite.B, which then modifies the registry to point to itself:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\PINF
Parite.B then infects the EXPLORER.EXE process, allowing it to remain resident in memory, after which Parite.B proceeds to infect all EXE and SCR files found on local and shared network drives. These files will be infected with Parite.A.
I think the files are unrecoverable because you overwritten the sectors where they were stored
.
[edit]
Oh yeah, try with FileScavanger - not free but it happened to me too and it worked with this one...
Posted: Mon May 08, 2006 11:37 am
by josku_x
I tried FileScavanger, but I still got the same result. And the computer did not noly have the Parite virus, it had a backdoor and a trojan and 2 viruses if I remember correctly. However, the hd has very much bad sectors so I think I'll throw it away.