Esato Mobile
General discussions : Non mobile discussion : Has anyone heard about this virus?
> New Topic
> Reply
< Esato Forum Index > General discussions > Non mobile discussion > Has anyone heard about this virus? Bookmark topic
sunils120 Posts: 480

Guys my pc is infected with "Virus.Win32.Sality.q" through a usb flash drive.
I am currently using an updated copy of Kaspersky AV and it can only detect it and doesn't disinfect it. My task manager and registry editor is disabled! Can anybody help? ITS URGENT.
--
Posted: 2008-05-29 10:59:24
Edit : Quote

Cycovision Posts: > 500

There are manual removal instructions and an automatic removal tool here:

http://www.2-spyware.com/remove-sality.html

It used to work a few months ago so hopefully it still does now.

Good luck!
--
Posted: 2008-05-29 11:06:16
Edit : Quote

kenoby Posts: 407

You should try booting in the safe mode by pressing F8 when BIOS ends and before boot sequence starts. Scan your drive with KAV, it should have a cli scan available.

Here is some more info:
http://www.york.ac.uk/services/cserv/security/spyware.html

and very good instructions are here
_________________
P1i - K850i

[ This Message was edited by: kenoby on 2008-05-29 10:19 ]

[ This Message was edited by: kenoby on 2008-05-29 10:23 ]
--
Posted: 2008-05-29 11:11:51
Edit : Quote

ronkx Posts: 48

try using hijack this and scan then find the file in there then slect then fix. restart and try if it is still there.
--
Posted: 2008-05-29 12:02:16
Edit : Quote

sunils120 Posts: 480

thanks for the replies guys but it has disabled msconfig,task manager and regisrty editor. i have no option other than formatting the hard drive.
--
Posted: 2008-05-29 17:51:05
Edit : Quote

kenoby Posts: 407

Did you reboot in the safe mode?

Anyway, there is more work on it than if you just reformat. It is an XP, I guess. Disable the Autorun option on the fresh install...
And scan before you enter any portable drive. I am surprised your AV didn't react the moment virus was read..



[ This Message was edited by: kenoby on 2008-05-29 17:03 ]
--
Posted: 2008-05-29 17:57:59
Edit : Quote

Cycovision Posts: > 500

Hijack this should work too, as ronkx suggested?

[ This Message was edited by: Cycovision on 2008-05-29 17:02 ]
--
Posted: 2008-05-29 18:00:37
Edit : Quote

arien617 Posts: > 500

May I ask where you got this flash drive from in the first place?

--
Posted: 2008-05-29 18:51:30
Edit : Quote

New Topic   Reply
Forum Index

Esato home