BleepingComputer.com: I think I have Sality virus!

Jump to content

Forum Guidelines

Posted Image Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help


Posted Image Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient.


Posted Image DO NOT RUN ComboFix unless requested to.


Posted Image Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.


Posted Image When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.


Posted Image Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.
  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • This topic is locked

I think I have Sality virus! Files are automatically copied on flash drive

#16 User is offline   shelf life 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 1,366
  • Joined: 06-November 08
  • Gender:Male
  • Location:@localhost

Posted 08 August 2011 - 05:22 PM

Hey your welcome, no problem. If you have access to another computer:
you could burn to a cd: microsoft security essential, (will provides both antivirus and anti-malware protection)

MSSE link
Def. files

Burn to a cd and install Security essentials first, then the def. files. The package will be useless without the def. files
MS essentials is only about 8MB in size, the def files are huge: 68MB.
68MB on dial up would take some time. transferring via a cd would be quicker if you can do it this way.
Is It Real or ScareWare?
How Can I Reduce My Risk.

#17 User is offline   Twin Headed Eagle 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 20
  • Joined: 12-July 11
  • Gender:Male

Posted 09 August 2011 - 01:49 AM

Hi,

I thought to do exactly as you now suggested...

I have access on my own computer :-)

As I also told, definitions are very huge for dial up, 68 mb O_O?
Beside very small installation of 8mb, very stupid in my opinion!

See you,

THE

#18 User is offline   Twin Headed Eagle 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 20
  • Joined: 12-July 11
  • Gender:Male

Posted 12 August 2011 - 07:35 AM

Just to tell you, I tried to scan with Eset, but cannot connect to Eset website, it just won't load, it keeps loading, but won't load. I also tried bit defender online scan, with the same results...
I tried on second computer as well as with dial up internet, and it loads perfectly, so I am waiting for further instructions...

Is there any other solution, I am planning to reinstall if there is no solution!

Thanks...

With regards,

THE

#19 User is offline   shelf life 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 1,366
  • Joined: 06-November 08
  • Gender:Male
  • Location:@localhost

Posted 12 August 2011 - 07:58 PM

What about burning those two files to cd then installing them on your machine?
Is It Real or ScareWare?
How Can I Reduce My Risk.

#20 User is offline   Twin Headed Eagle 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 20
  • Joined: 12-July 11
  • Gender:Male

Posted 13 August 2011 - 01:17 PM

Remind me which files, MSE and the definitions, am I right???

Sorry, I completely forgot about it...will do ASAP!

With regards,

THE

#21 User is offline   shelf life 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 1,366
  • Joined: 06-November 08
  • Gender:Male
  • Location:@localhost

Posted 13 August 2011 - 01:43 PM

yes, MSE link to install the main program and the def. link to install the definition files. the def files on dial up would take some time (68MB)
Is It Real or ScareWare?
How Can I Reduce My Risk.

#22 User is offline   Twin Headed Eagle 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 20
  • Joined: 12-July 11
  • Gender:Male

Posted 20 August 2011 - 12:09 AM

Hello, I installed Mycrosoft Security Essentials as you requested, and runned the full scan...
It scanned for 4 hours, but luckily found some bad stuff...
One was called Worm AutoIT, i saw also some trojans. I plugged in USB and it now seems to be OK, nothing coppies anymore. I scanned again, and nothing came up. I am also planning to reinstall this computer as there are some errors...
Can you tell me for some better protection in future? Will install Panda antivirus as you suggested!
Again thank you for your time and patience!
And to tell you, from your help and great knowledge, i saw how you guys posses enormous amounts of knowledge about computers! I asked some people how they learned it and they told me for UNITE, i then googled and found it's schools, and I am planning to apply into one, because this job is firstly interesting for me who know nothing, then so cool and helpful!
Waiting for your response...

With high regards,
THE

#23 User is offline   shelf life 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 1,366
  • Joined: 06-November 08
  • Gender:Male
  • Location:@localhost

Posted 20 August 2011 - 02:54 PM

Your welcome. There are on line schools where you could learn about removing malware. There is a topic about it here the list of the schools is in post #6.

Quote

for some better protection in future?

At the end everybody gets this:

10 Tips for Prevention and Avoidance of Malware:
There is no reason why your computer can not stay malware free.


No software can think for you. Help yourself. In no special order:

1) It is essential to keep your operating system (Windows) browser (IE, FireFox, Chrome, Opera) and other software up to date to "patch" vulnerabilities that could be exploited. Visit Windows Update frequently or use the Windows auto-update feature. Staying updated is also essential for web based applications, browser plugins and addons like Java, Adobe Flash/Reader, iTunes etc. More and more third party applications are being targeted. Use the auto-update features available in most software. Not sure if you are using the latest version of software? Check their version status and get the updates here.

2) Know what you are installing to your computer. Alot of software can come bundled with unwanted add-ons, like adware, toolbars and malware. More and more legitimate software is installing useless toolbars if not unchecked first. Do not install any files from ads, popups or random links. Do not fall for fake warnings about virus and trojans being found on your computer and you are then prompted to install software to remedy this. See also the signs that you may have malware on your computer.

3) Install and keep updated: one antivirus and two or three anti-malware applications. If not updated they will soon be worthless. If either of these frequently find malware then its time to *review your computer habits*.

4) Refrain from clicking on links or attachments via E-Mail, IM, IRC, Chat Rooms, Blogs or Social Networking Sites, no matter how tempting or legitimate the message may seem. Do you trust the source? See also E-mail phishing Tricks.

5) Do not click on ads/pop ups or offers from websites requesting that you need to install software to your computer--*for any reason*. Use the Alt+F4 keys to close the window.

6) Don't click on offers to "scan" your computer. Install ActiveX Objects with care. Do you trust the website to install components?

7) Consider the use of limited (non-privileged) accounts for everyday use, rather than administrator accounts. Limited accounts can help prevent *malware from installing and lessen its potential impact.* This is exactly what user account control (UAC) in Windows Vista and Windows 7 attempts to address.

8) Install and understand the *limitations* of a software firewall.

9) The why and how for securing your browser for safer surfing.

10) Warez, cracks etc are very popular for carrying malware payloads.If you download/install files via p2p networks you will encounter malware. A file can be named anything be nothing but malware or have malware bundled in it. Can you really trust the source of the file?


More info/tips with pictures, links below

Happy Safe Surfing.
Is It Real or ScareWare?
How Can I Reduce My Risk.

#24 User is offline   Twin Headed Eagle 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 20
  • Joined: 12-July 11
  • Gender:Male

Posted 20 August 2011 - 04:32 PM

Great reading, thanks, I didn't know how some things like updating are important! Just to give this to my stupid brother to read, although he doesn't know english good. He mess the computer, and I have to repair it!!
I am very busy with school, but will try to apply in some school to see how it is working? Who knows, it could be good, maybe i become helper one day?

I think that we finished, i now know much more than before, and will try to implement it!

Thank you...enjoy

See you

THE

#25 User is offline   shelf life 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 1,366
  • Joined: 06-November 08
  • Gender:Male
  • Location:@localhost

Posted 21 August 2011 - 08:14 AM

Quote

will try to apply in some school

You dont really apply, as far as I know every body is accepted in any of the schools. You learn at your own pace, there is no time limit.

Maybe you should create a limited account for your brother and delete the current one he has? May help. Happy safe surfing.

Limited account
Is It Real or ScareWare?
How Can I Reduce My Risk.

#26 User is offline   Twin Headed Eagle 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 20
  • Joined: 12-July 11
  • Gender:Male

Posted 21 August 2011 - 10:28 AM

It is his computer, so I will let him do what he wants, but this is the last time that i repair it...
I will install protection and update windows, enough from my side :wink:

OK, you can close the tread, I will apply at What The Tech...

Thanks again for everything :thumbsup: :thumbsup: :thumbsup:

This post has been edited by Twin Headed Eagle: 21 August 2011 - 12:19 PM


#27 User is offline   Twin Headed Eagle 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 20
  • Joined: 12-July 11
  • Gender:Male

Posted 24 August 2011 - 08:08 AM

Hey still there, we solved the problem, so I need you to close the topic, because I need to apply for malware removal classroom, and topics for seeking help must have been closed...
I am so impatient...

Best regards :-)

#28 User is offline   shelf life 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 1,366
  • Joined: 06-November 08
  • Gender:Male
  • Location:@localhost

Posted 25 August 2011 - 08:46 PM

I can't "officially" close a post, but we are finished and both agree to that so we will consider it closed for your sake:

Quote

topics for seeking help must have been closed...


Maybe i can close it....

This post has been edited by shelf life: 25 August 2011 - 08:47 PM

Is It Real or ScareWare?
How Can I Reduce My Risk.

Share this topic:


  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • This topic is locked

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users