Polip/win32 solution ?

[Radar_mX]

If anyone who doesnt know this virus with worm capability , it infects exe's and bat's especially exe's related to windows and into system32 folder

so it inserts malware parts into exe's ,some stupid AV remove system files , but I want to disinfect all infected exe's on Windows (XP).

I hate to format my partions and install windows again because it will take my time also I could go through headaces with boot issues , I have now triple boot with mac - ubuntu 9.04 and Mac ( IATKOS V7 ) on my desktop PC.

does anyone know a working solution with a tool or recommended AV ?

[computathug]

You can find a removal tool for the virus here.

Code: Select all

http://www.bitdefender.com/site/Downloads/browseFreeRemovalTool/

Hope this helps

[Radar_mX]

thank you very much my friend

When I go home I will try it on my Desktop PC

[bozotheclown138]

haha i found a pretty funny thing regarding this on HH

First guy said this.
"DO NOT DOWNLOAD LMAO! UNLESS YOU WANNA BE INFECTED WITH POLIPOS!

THIS IS A SCAN OF THE CRYPTER.EXE!!!!

File Info

Report generated: 23.11.2008 at 20.24.32 (GMT 1)
Packer detected: Microsoft Visual Basic 5.0 / 6.0
Self-Extract Archive: Nothing found
Binder Detector: File is possible binded with malware
Detection rate: 17 on 24

Detections

a-squared - Nothing found!
Avira AntiVir - W32/Polip.A
Avast - Win32:Polipos (0)
AVG - Virus found Win32/Polipos
BitDefender - Win32.Polip.A
ClamAV - W32.Polipos.A
Comodo - Nothing found!
Dr.Web - Win32.Polipos
Ewido - Nothing found!
F-PROT 6 - W32/Polip.A
G DATA - P2P-Worm.Win32.Polip.a A
IkarusT3 - Nothing found!
Kaspersky - P2P-Worm.Win32.Polip.a
McAfee - W32/Polip virus
MHR (Malware Hash Registry) - Nothing found!
NOD32 v3 - Win32/Polip virus
Norman - Virus W32/Polipos.A ()
Panda - W32/Polipos.A
Quick Heal - W32.PoliPos
Solo Antivirus - Nothing found!
Sophos - W32/Polipos-A
TrendMicro - PE_POLIP.A
VBA32 - Virus.Win32.Polip.A
Virus Buster - Nothing found!

Scan report generated by
NoVirusThanks.org "

2nd guy responded with this.
"In case you don't know polipos is a PE file infector, the crypter he released is not infected with polipos my friend, but you sure as hell are lol."

[Radar_mX]

haha i found a pretty funny thing regarding this on HH

First guy said this.
"DO NOT DOWNLOAD LMAO! UNLESS YOU WANNA BE INFECTED WITH POLIPOS!

THIS IS A SCAN OF THE CRYPTER.EXE!!!!

File Info

Report generated: 23.11.2008 at 20.24.32 (GMT 1)
Packer detected: Microsoft Visual Basic 5.0 / 6.0
Self-Extract Archive: Nothing found
Binder Detector: File is possible binded with malware
Detection rate: 17 on 24

Detections

a-squared - Nothing found!
Avira AntiVir - W32/Polip.A
Avast - Win32:Polipos (0)
AVG - Virus found Win32/Polipos
BitDefender - Win32.Polip.A
ClamAV - W32.Polipos.A
Comodo - Nothing found!
Dr.Web - Win32.Polipos
Ewido - Nothing found!
F-PROT 6 - W32/Polip.A
G DATA - P2P-Worm.Win32.Polip.a A
IkarusT3 - Nothing found!
Kaspersky - P2P-Worm.Win32.Polip.a
McAfee - W32/Polip virus
MHR (Malware Hash Registry) - Nothing found!
NOD32 v3 - Win32/Polip virus
Norman - Virus W32/Polipos.A ()
Panda - W32/Polipos.A
Quick Heal - W32.PoliPos
Solo Antivirus - Nothing found!
Sophos - W32/Polipos-A
TrendMicro - PE_POLIP.A
VBA32 - Virus.Win32.Polip.A
Virus Buster - Nothing found!

Scan report generated by
NoVirusThanks.org "

2nd guy responded with this.
"In case you don't know polipos is a PE file infector, the crypter he released is not infected with polipos my friend, but you sure as hell are lol."

I searched for a removal tool for polip/win32 on the link that computathug gave me
it worked for me , my windows is clean now and everything is fine


a lot of thanks to computathug

[ebrizzlez]

The file is cleaned.

I checked, its just packed with a executable compressor.

[IceDane]

I would like to see an example of the aforementioned infection of bat files, please.