Article View: alt.comp.virus
Article #429Re: parity boot b virus help reqired
From: Ken Williams
Date: Sat, 28 Nov 1998 00:00
Date: Sat, 28 Nov 1998 00:00
41 lines
3033 bytes
3033 bytes
Wizard wrote: > X-No-Archive:Yes > > Alexis COMTE wrote: > > > > I also have this virus and I am not able to remove IT. > > > > When I tried to install Mc Affee, he tolds me that PC was Infected with > > Parity Boot. > > > > Then I installed McAffee on an other computer and built an emergency disk. > > > > I tried to boot the first computer with the mcaffee emergency disk but I got > > the error message: > > > > NOT ENOUGH MEMORY TO RUN SCAN.EXE > > > > At the moment, I do not know what to do except live with the virus... > > > This message often arises when you do not use an empty, freshly format > diskette to make your emergency disk on. > Make it again and this time make sure you test on the machine you made > it on. You must COLD boot to do this. A couple of other things. First, I've often found that when using McAfee and I get the machine is infected, if you add the command line option /nomem, it will often find it and remove it. If this doesn't work, then boot off of the floppy. The reason that you got the out of memory message, is because the newer versions of McAfee (3.x I believe) REQUIRE that HIMEM.SYS be loaded, and DOS=HIGH be in the CONFIG.SYS. In other words, copy HIMEM.SYS to the floppy, then make the following CONFIG.SYS: DEVICE=A:\HIMEM.SYS DOS=HIGH Then you should be able to run the check. Ken Williams kbs@xmission.com.zz (Remove .zz when replying.)
Technical Details
Message-ID:
<3660DC7C.6FEA4AFF@xmission.com.zz>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<7346ov$kmj$1@barcode.tesco.net> <365936ae.9023565@news.atriserv.nl> <365F71AB.6759F018@voicenet.com> <73puqk$pms$1@news4.isdnet.net> <366084C9.F662AEE0@nh.ultranet.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 11253a,a90fe2af8837afb0 X-Google-Attributes: gid11253a,public X-Google-Thread: 1082f9,a90fe2af8837afb0 X-Google-Attributes: gid1082f9,public X-Google-Thread: 1124b5,a90fe2af8837afb0 X-Google-Attributes: gid1124b5,public X-Google-Thread: f42b5,a90fe2af8837afb0 X-Google-Attributes: gidf42b5,public X-Google-Thread: 104ea8,a90fe2af8837afb0 X-Google-Attributes: gid104ea8,public X-Google-Thread: fcd68,a90fe2af8837afb0 X-Google-Attributes: gidfcd68,public X-Google-Thread: 1113d2,a90fe2af8837afb0 X-Google-Attributes: gid1113d2,public X-Google-Thread: fe5b5,a90fe2af8837afb0 X-Google-Attributes: gidfe5b5,public From: Ken Williams <kbs@xmission.com.zz> Subject: Re: parity boot b virus help reqired Date: 1998/11/28 Message-ID: <3660DC7C.6FEA4AFF@xmission.com.zz> X-Deja-AN: 416685662 Content-Transfer-Encoding: 7bit References: <7346ov$kmj$1@barcode.tesco.net> <365936ae.9023565@news.atriserv.nl> <365F71AB.6759F018@voicenet.com> <73puqk$pms$1@news4.isdnet.net> <366084C9.F662AEE0@nh.ultranet.com> X-Accept-Language: en Content-Type: text/plain; charset=us-ascii X-Complaints-To: abuse@xmission.com X-Trace: news.xmission.com 912317343 14732 166.70.9.232 (29 Nov 1998 05:29:03 GMT) Organization: Andrew's Web Page (http://www.xmission.com/~kbs) Mime-Version: 1.0 NNTP-Posting-Date: 29 Nov 1998 05:29:03 GMT Newsgroups: alt.comp.virus,alt.comp.virus.pro-virus,alt.comp.virus.source.code,alt.computer,alt.computer.workshop,cn.bbs.comp.virus,relcom.comp.virus,symantec.support.win95.nortonantivirus.general