Well, sality is polymorfic virus that infect exe files, your antivirus will not help in this case, cause it was infected as well.
You can try follow this suggestion from kaspersky lab : http://support.kaspersky.com/faq/?qid=208279889
Also, the latest cureit ( http://www.freedrweb.com/cureit/) it's able to disinfect your infection- but you should download it on uninfected computer, unzip it and write on cd before curing in safe mode Otherwise, it mightn't help you.
The latest, but not the last thing, please execute this script in avptool:
Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\WINDOWS\system32\drivers\qnfmk.sys','');
QuarantineFile('C:\WINDOWS\WSEC32HK.dll','');
DeleteFile('C:\WINDOWS\WSEC32HK.dll');
DeleteFile('C:\WINDOWS\system32\drivers\qnfmk.sys');
BC_ImportALL;
ExecuteSysClean;
ExecuteRepair(6);
ExecuteRepair(8);
BC_Activate;
RebootWindows(true);
end.
You computer will reboot.
After reboot: - Clean Temp-Maps, Cache of Browsers, Recycler. Use Windows service tool cleanmgr or CCleaner or ClearProg
- Close all the programs and start only Internet Explorer!!!
- Repeat 3 log files in accordance with the rules.
- Switch Antivirus and, if you have - Firewall, on.
- Go On-Line - Pack ( zip) (with pass 'virus')
Qurantine_AVZ ( it is subfolder where your avptool exist) Please upload it by link http://virusinfo.info/upload_virus_eng.php?tid=36223 - Attach 3 logs to your next post..