Posted by sunils120
Guys my pc is infected with "Virus.Win32.Sality.q" through a usb flash drive.
I am currently using an updated copy of Kaspersky AV and it can only detect it and doesn't disinfect it. My task manager and registry editor is disabled! Can anybody help? ITS URGENT.
Posted by Cycovision
There are manual removal instructions and an automatic removal tool here:
http://www.2-spyware.com/remove-sality.html
It used to work a few months ago so hopefully it still does now.
Good luck!
Posted by kenoby
You should try booting in the safe mode by pressing F8 when BIOS ends and before boot sequence starts. Scan your drive with KAV, it should have a cli scan available.
Here is some more info:
http://www.york.ac.uk/services/cserv/security/spyware.html
and very good instructions are here
_________________
P1i - K850i
[ This Message was edited by: kenoby on 2008-05-29 10:19 ]
[ This Message was edited by: kenoby on 2008-05-29 10:23 ]
Posted by ronkx
try using hijack this and scan then find the file in there then slect then fix. restart and try if it is still there.
Posted by sunils120
thanks for the replies guys but it has disabled msconfig,task manager and regisrty editor. i have no option other than formatting the hard drive.
Posted by kenoby
Did you reboot in the safe mode?
Anyway, there is more work on it than if you just reformat. It is an XP, I guess. Disable the Autorun option on the fresh install...
And scan before you enter any portable drive. I am surprised your AV didn't react the moment virus was read..
[ This Message was edited by: kenoby on 2008-05-29 17:03 ]
Posted by Cycovision
Hijack this should work too, as ronkx suggested?
[ This Message was edited by: Cycovision on 2008-05-29 17:02 ]
Posted by arien617
May I ask where you got this flash drive from in the first place?