Sality Virus

Posted by B1gF1sH | Information Technology, Tips n Trick | Saturday 11 July 2009 10:09 am

Sality is a virus with keylogging and backdoor capabilities. It may infect executable files by prepending its code to host files. In some cases, computers that have not been engaged by anti-virus program and infected sality requires several steps to clean the virus.
Next I will explain briefly how to clean sality virus, here we go:

1. Disconnect the computer from the network and internet

2. Turn off System Restore during the cleaning process

3. Turn off the Autorun and Default Share. Please download the file and run the following ways:  right-click install repair.inf

http://www.4shared.com/file/82762498/f5dc1edd/repair.html?dirPwdVerified=feea1d94

4. Turn off the active application program in memory so that the cleaning process faster, especially programs that are in the startup list.5. We suggest using the removal scan tools and dont forget to change the extension of the removal tools with an other one [for example: CMD]. So that does not re-infected by W32/Sality.AE

6. So that the computer is infected W32/Sality.AE can booting on safe mode, please restore the registry has been modified. Please download the following files and then run on the OS that is infected W32/Sality.AE.

http://www.4shared.com/file/82761423/934fb170/_2__Sality.htmldirPwdVerified=feea1d94

7. Fix registry is modified by another virus, please download the following tools and run the file in the following manner: right-click install repair.inf

http://www.4shared.com/file/82874724/f485f1dd/repair.html?dirPwdVerified=3b1f2fa9

8. Restart the computer and re-scan using the removal tools to ensure your computer has been clean from viruses.

9. For optimal cleaning and prevent re-infection should install and scan with the antivirus that can detect Sality well.

Gut Luck

1 Comment »

  1. Comment by hapyamake — November 3, 2009 @ 9:23 am

    Other variant is possible also

RSS feed for comments on this post. TrackBack URI

Leave a comment

TunePlus Wordpress Theme