OS: Windows Vista SP2
My avast antivirus software keeps detecting recurring instances of a Win32: Sality virus, along with Malas.B [wrm]. I scanned the infected files with an online Kapersky tool, and it said they were infected with P2P-Worm.Win32.Malas.r.
The virus manifests in the public folder. Scanning the infected files, Dr. Web CureIt found:
SexScreenSaver.exe;C:\Users\Public;Win32.Sector.5; Cured.;
SexScreenSaver.exe;C:\Users\Public;Win32.HLLW.Asal am;Deleted;
SexScreenSaverlib.exe;C:\Users\Public;Win32.HLLW.A salam; Deleted;
I've been getting these types of messages every other reboot for a month or two now. I've scheduled boot-time virus scans with avast, and used other anti-virus programs in safe mode (superantivirus, ad-aware, malwarebytes, kaspersky virus removal, dr.web cureit) without successfully detecting anything. Even stranger, most antivirus programs, upon scanning the infected files, do not detect anything.
I tried to do a full system scan with Dr. Web CureIt, but during scan prep, my computer blue screens for half a second, and restarts. It did this three times already.
Nothing else on my computer seems to be affected. I do not notice performance issues, and it only seems like the virus appears in one place, the public folder.
I know the prevailing advice is to reformat and reinstall, but I want to try to avoid that. This virus hasn't damaged anything yet, I don't think.