Malware

How to remove “Win32.Parite.F (B)”?

Malware Removal

The Win32.Parite.F (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32.Parite.F (B) virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • Unconventionial language used in binary resources: Portuguese (Brazilian)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Attempts to identify installed AV products by installation directory
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Win32.Parite.F (B)?


File Info:

name: 64DCCB2FE9D7DE5FD703.mlw
path: /opt/CAPEv2/storage/binaries/d76aa0214ada90882c6f73081e596c6da5d8e78a0f7189fa25de5494db613585
crc32: 0560924C
md5: 64dccb2fe9d7de5fd703829493085533
sha1: aa284e30cad596616962bdd4f3fb0d19d7562dd7
sha256: d76aa0214ada90882c6f73081e596c6da5d8e78a0f7189fa25de5494db613585
sha512: 3f6a23874424064355cbc641c0e85520ee2e2d5bd5d4d05b89a97dad9651e1effa3b3a310fa04299e0c0c8bb58251db5d585a9a28e890c56334ced3f2ca1de3e
ssdeep: 12288:jEYN9HRF4NtLWhYngKaOaxJuFRnjFRPu:DoWKn7faruFVjr
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12BA4239B1BD0C401C74E11300D9B6FEC6566A9F4CF862EEB0A71F90EC6B79D10AE7A11
sha3_384: 3ea102622660608e7cecefd953519c17e04569442844ca8e6b355ebb1ebb44d89d63f4bd5dadb7535d4727dd3120b4df
ep_bytes: b858014f005064ff3500000000648925
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Win32.Parite.F (B) also known as:

LionicTrojan.Win32.Banker.lfvg
MicroWorld-eScanWin32.Parite.F
FireEyeGeneric.mg.64dccb2fe9d7de5f
CAT-QuickHealW32.Perite.A
SkyhighBehavesLike.Win32.Virus.gc
ALYacWin32.Parite.F
Cylanceunsafe
SangforTrojan.Win32.Agent.ed
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaVirus:Win32/Banker.b1ff5b7f
K7GWSpyware ( 0055e3db1 )
K7AntiVirusSpyware ( 0055e3db1 )
ArcabitWin32.Parite.F
BitDefenderThetaAI:Packer.802A81AF1C
SymantecInfostealer.Banpaes
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Parite
APEXMalicious
ClamAVWin.Spyware.Banker-889
KasperskyTrojan-Banker.Win32.Banker.amh
BitDefenderWin32.Parite.F
NANO-AntivirusTrojan.Win32.Banker.eprs
AvastWin32:Parite [Inf]
TACHYONTrojan-Spy/W32.Banker.482816
EmsisoftWin32.Parite.F (B)
F-SecureDialer.DIAL/Generic
DrWebWin32.Parite.2
ZillyaTrojan.Banker.Win32.4605
TrendMicroPE_PARITE.A
Trapminemalicious.high.ml.score
SophosW32/Parite-B
SentinelOneStatic AI – Malicious PE
JiangminWin32/Parite.b
WebrootW32.Parite.Gen
GoogleDetected
AviraDIAL/Generic
VaristW32/Banker.QXUQ-4139
Antiy-AVLTrojan[Banker]/Win32.Banker
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.TrojanDownloader.Dadobra.~JH1@1qge2o
MicrosoftVirus:Win32/Parite.B
ViRobotTrojan.Win32.A.Banker.482816.A
ZoneAlarmTrojan-Banker.Win32.Banker.amh
GDataWin32.Parite.F
CynetMalicious (score: 100)
AhnLab-V3Win32/Parite
MAXmalware (ai score=100)
VBA32Virus.Win32.Parite.b
MalwarebytesGeneric.Malware/Suspicious
PandaW32/Parite.B
TrendMicro-HouseCallPE_PARITE.A
RisingVirus.Parite!1.9B80 (CLOUD)
YandexTrojan.GenAsa!fztziMWt5PY
IkarusTrojan-Spy.Win32.Banker.RM
FortinetW32/Parite.B
AVGWin32:Parite [Inf]
Cybereasonmalicious.0cad59
DeepInstinctMALICIOUS

How to remove Win32.Parite.F (B)?

Win32.Parite.F (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment