[font=Segoe UI]If you have any important files, I am suggesting you to back up them onto a clean USB Flash Disk since the best way to eliminate Sality completely is by a PC reformat. If we reformat the PC, everything on your HD would be gone. I asked you to perform those disinfection steps before to eliminate most of what we can, not to completely disinfect the PC. That way would help you get a better back up process and less hassle/errors, just less. Sorry but, this is all I could do to help.
Sorry, I guess you were right he was mentioning that you should reformat PC and start over since Salty is so nasty. Alternatively, you may like to wait till some people with more specialist knowledge come to this forum.
PS @L’arc, if you think I misunderstood you, you can point it out. I thought you had gone off line. It is hard for me to read your comments since the smaller fonts.
Hi ladygaga,
If the virus has infected (and continues to infect) more of the files in your computer, it may soon infect everything.
If you have important documents, pictures etc that can not be easily replaced, you should make a copy of it to a flash drive or CD’s.
It is possible you will have to reformat and reinstall Windows. (Do you have the Windows CD?)
Reformat basically wipes everything from the computer hard drive. The virus included.(Your pictures/files/bookmarks/emails also.You loose the lot.)
I strongly recommend you follow the steps posted earlier, to run the extra tools suggested, and report what they find. It will give an idea of how widespread the virus is.
well i have finish the SalityKiller.exe scan and nothings find outs
and Tarq57 the virus had stop spreading after i did a boot scan on avast.
Hmmm… @L’ark Are you sure that the malware was so nasty…? I’m not a specialist but it seems to be O.K… Of course, to be sure, reformatting is probably the best way, though.
Rumpel,
Sality was very nasty, umm, I believe, devastative would be the better word to describe it since it may have been removed yet it leaves your computer damaged due to file infections.
Hearing the word about messenger.exe and jqsnotify.exe being oddly gone could be a possible sign of spread of the infection. Anyhow, it would always be best to have a second opinion from someone else so I guess, it would better if we consider waiting for other ideas about this.
Thank you for your help.
PS: Sorry, I can’t keep up with the time. Good night to everyone.
L’arc messenger.exe and jqsnotify.exe is gone because avast detected it that it is infected and deleted it when i have the boot scan so thats why it was gone
GOOD NIGHT TOO
I see. Thank you, L’arc, good night.
@ladygaga345 I guess it all depends on you now. I’d go for reformatting but if you are sure it’s gone, you may like to download Windows Messenger and Java, you can download them:
http://www.java.com/en/download/manual.jsp
They may not work if other files are damaged, though.
[s]Also, it would be suitable for you to get rid of the remains of Panda and Norton.
http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039
As for Panda, please search the net with words “Panda Uninstall” and pick up an appropriate version from the official site.[/s]
I took it wrong. Ladygaga345 must have let the computer through online Panda and Kaspersky scan, which won’t conflict against Avast!.
Alternatively, you may like to wait till some people with more knowledge visit this forum.
but i didnt know what norton product has been installed on my pc
ahh awkie i will w8
Haha, sorry. You may like turn on the mail notification function. Just check the box of “Notify me of replies”. For there are many people here with more knowledge will visit this forum.
hey Rumpel Ive scan my system with Dr.Web Cure It and then find a file named pskill.exe is it a threat???
the path of this file is C:Windows\system32
PsKill is a part of Systeminternals’ PsTools. As the explanation says, it basically kills processes but it can be used by malware…especially when seeing you don’t know why it is there.
so shall i delete it or ignore it???
If you didn’t know it was there, it would be suitable for you to delete it but…Now I see some people coming, especially essexboy is good at these kinds of thing. I’d definitely ask him about these issues than myself.
Awkie ill w8 of someones suggestion if im gonna delete this file or ignore it
Hey be careful windows file are dangerous to delete or it will damage your whole system!
Just wait for experts don’t delete it!
yeah ill w8 for some experts
You can leave that file - If you have Virut you can repair it till the cows come home but windows will still be broken I am afraid
Read Miekiemoes blog http://miekiemoes.blogspot.com/2009/02/virut-and-other-file-infectors-throwing.html she is one clever lady ;D
This will explain what Virut does and why it is best to reformat
When I come across a Virut infection I clean it up just enough to recover personal data and then post this
Well, I'm afraid I have bad news for you.You have been infected with a polymorphic file infector named Virut. This infection will spread to every executable file in your computer, and unfortunately the only cure for it is to Reformat and Reinstall.
Right now, the best thing you can do is to backup, preferably to CD, all your important data, documents, pictures, movies, and songs.
DO NOT backup any applications or installers and DO NOT backup any files with the following extensions:
[].exe
[].scr
[].htm
[].html
[].xml
[].zip
[*].rarFor more information on Virut, and why you need to reformat, have a read of miekiemoes blog here.
To find out how to carry out an XP Reformat and Reinstall, please see this page. If you are using Vista, then check this page instead.
Once you have reformatted and reinstalled Windows, have a look at this page for some useful tips on staying clean, along with links to some freeware to help.
To find out more information about how you may have got infected in the first place, you can read this article.
I am sorry I cannot give any better news.
Yes. I knew L’arc was right but I didn’t know how to convince ladygaga345 due to my lack of knowledge. I’m sure that pskill.exe is not the vital system file but it doesn’t matter. If even essexboy says that ladygaga345’s computer needs reformatting, I don’t think you have a better piece of advice here. Thank you, essexboy.
Best to reinstall windows and format the hard drive only proven way fo get rid of stubborn viruses. Quick and easy! ;D