hiii
I have virus that can't let me start my antivirus and even if I install a new one .
I installed kaspersky virus removal tool and the virus name is (win32.sality.aa) and the infected files are the *.exe files
I wish u help me
thanks
Printable View
hiii
I have virus that can't let me start my antivirus and even if I install a new one .
I installed kaspersky virus removal tool and the virus name is (win32.sality.aa) and the infected files are the *.exe files
I wish u help me
thanks
hiiiiiiiiiiiii
Well, sality is polymorfic virus that infect exe files, your antivirus will not help in this case, cause it was infected as well.
You can try follow this suggestion from kaspersky lab : [URL]http://support.kaspersky.com/faq/?qid=208279889[/URL]
Also, the latest cureit ( [URL]http://www.freedrweb.com/cureit/[/URL]) it's able to disinfect your infection- but you should download it on uninfected computer, unzip it and write on cd before curing in safe mode ;) Otherwise, it mightn't help you.
The latest, but not the last thing, please execute this script in avptool:
[code]
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\WINDOWS\system32\drivers\qnfmk.sys','');
QuarantineFile('C:\WINDOWS\WSEC32HK.dll','');
DeleteFile('C:\WINDOWS\WSEC32HK.dll');
DeleteFile('C:\WINDOWS\system32\drivers\qnfmk.sys');
BC_ImportALL;
ExecuteSysClean;
ExecuteRepair(6);
ExecuteRepair(8);
BC_Activate;
RebootWindows(true);
end.
[/code] You computer will reboot.
After reboot: - Clean Temp-Maps, Cache of Browsers, Recycler. Use Windows service tool cleanmgr or CCleaner or ClearProg
- Close all the programs and start only Internet Explorer!!!
- Repeat 3 log files in accordance with the rules.
- Switch Antivirus and, if you have - Firewall, on.
- Go On-Line - Pack ( zip) (with pass 'virus')
Qurantine_AVZ ( it is subfolder where your avptool exist) Please upload it by link [URL]http://virusinfo.info/upload_virus_eng.php?tid=36223[/URL] - Attach 3 logs to your next post..