Who is W32.hllw.Parved worm?

Question

When my computer starts up it gives the responds "Hole.exe" error.Norton gave me the solution but i have done it but crashed my computer but i copied the file regedit.exe to a com file so i could fix the regedit entry back again ie i change the solution back in the error

But the hole.exe error is back there. Norton virusscanner didn't found any virus although i have uploaded latest update to my computer. What has happend and how can it be fixed?

Answer

This question was answered on October 31, 2004. Much of the information contained herein may have changed since posting.

W32.HLLW.Parved Also Known As: W32.Parved [McAfee], Win32.Deprave [CA] is a network-aware worm that attempts to replicate across the open network shares The worm copies itself to the remote computer using many different names carried by the worm It also uses an icon typically associated with a Shockwave Flash file This worm is written in the Borland C programming language For each share that the worm finds, it copies itself as one of the following:

Bill Clinton.exe

Microsoft.exe

BIN Laden.exe

Nice Holiday.exe

Twin Towers.exe

Fishing.exe

The Black Hole.exe

Pretty Woman.exe

Anime.exe

Internet.exe

Office 2000.exe

The list is bigger but hey i think you get the picture To remove it reverse the changes that the worm made in the registry key:

HKEY_LOCAL_MACHINE\Software\CLASSES\exefile\shell\open\command

Update the virus definitions

Run a full system scan and delete all the files detected as W32.HLLW.Parved This should help.

Need Help with this Issue?

We help people with technology! It's what we do.
Schedule an Appointment with a location for help!

Author

Posted by Michael of Katharine Gibbs School - New York on October 31, 2004