Google Community
Latest Forums Rules Resources
Custom Search

Go Back   Google Community > Webmaster Forums > Microsoft Online Search

GoogleCommunity Sponsor

Reply
 
LinkBack Thread Tools Display Modes
Old 01-18-2009, 11:00 PM   #1 (permalink)
Noogle
 
Join Date: Jan 2009
Posts: 1
Thanks: 0
Thanked 0 Times in 0 Posts
girish_ok is on a distinguished road
how to remove w32/sality.ah virus

i tried to remove the sality.ah virus with mcafee 8.5i, its cleans the virus but when i restart the system, it again appears.
the virus will stop executing .exe files
i tried to install antivirus softwares like [kaspersky, avg, avast etc.,] but virus stops executing those files and even when i search for online scan it stops the page from displaying, how can i remove this virus please help on this issue asap
thanks in advance
girish_ok is offline   Reply With Quote
 
Sponsored Links
Old 01-18-2009, 11:39 PM   #2 (permalink)
Googler
 
Honest Bob's Avatar
 
Join Date: Jan 2009
Location: Bottisham, Cambridgeshire, East Anglia, England, The UK, Europe, Planet Earth, The Milky way. LOL.
Posts: 68
Thanks: 0
Thanked 1 Time in 1 Post
Honest Bob is on a distinguished road
If you sat how you got it I may be able to help.
Honest Bob is offline   Reply With Quote
Old 01-20-2009, 01:57 AM   #3 (permalink)
Senior Googler
 
Join Date: Nov 2008
Posts: 134
Thanks: 1
Thanked 4 Times in 4 Posts
vik88 is on a distinguished road
try to reinstall your system
vik88 is offline   Reply With Quote
Old 06-30-2009, 01:23 PM   #4 (permalink)
Noogle
 
Join Date: Jun 2009
Posts: 1
Thanks: 0
Thanked 0 Times in 0 Posts
WeiShi is on a distinguished road
Sality removal

Reformat your HD, reinstall your OS. DO NOT reattach ANY external storage devices such as flash drives, digital cameras or even cell phones. If they've been used since infection, they too are infected. The sality virus is only half your problem. It injects it's code into exe files but also adds code to several system files, including the kernal32.dll. This code is not the sality virus and will not be detected by any AV software. Among other things, it checks to see if a sality variant is present and if not it will retrieve the code from a url. A good firewall will alert you to this activity, but only once. After a reboot, the firewall will be set to allow the process. Interestingly enough, when it changes the registry settings, it also writes these changes to all restore points in the \system volume information\_resto~1\rpxxx\snapshot\ registry keys.
Removing the virus with conventional AV software only corrupts the exe files it has infected but will not stop continued infection. If Symantec, McAfee, Microsft and the like spent as much energy on research as they do on marketing, this forum wouldn't be necessary.
By the way... Macs aren't affected.

Good luck. Hope this helped.
WeiShi is offline   Reply With Quote
Old 08-27-2009, 09:33 AM   #5 (permalink)
Googler
 
Join Date: Apr 2009
Posts: 76
Thanks: 0
Thanked 0 Times in 0 Posts
pqrs720 is on a distinguished road
Exclamation Cheap Abercrombie jackets

Cheap Abercrombie jackets,Cheap all Abercrombie&Fitch Clothes Top quality,factory price,order nowCheap Abercrombie jackets Cheap Discount Brand Clothing [size=9pt]Abercrombie jackets ,Abercrombie and fitch jackets[/size]
pqrs720 is offline   Reply With Quote
Reply

Tags
virus removal

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



Similar Threads
Thread Thread Starter Forum Replies Last Post
Virus Problems ? AdsenseCoach Offers and Requests 0 03-04-2006 07:35 AM
Virus Protection geekerati Gmail Forum 5 12-05-2005 01:07 PM
virus search google Chit Chat 1 06-20-2005 12:06 PM
MSN virus dude66 General Discussion 9 02-23-2005 02:02 PM
MSN virus broken Chit Chat 11 09-03-2004 01:20 PM


All times are GMT -8. The time now is 11:08 AM.


Powered by vBulletin®
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.1.0
© 2004–2007 Google Community