There are no guarantees or shortcuts
when it comes to malware removal, especially when dealing with file infectors
which are extremely destructive
as they inject code into critical system files making them irreparable. Win32/Sality
is a dangerous polymorphic file infector
which infects .exe, .scr files
, downloads more malicious files to your computer, steals sensitive system information/passwords and sends it back to the attacker.I do not know of any security vendor who will guarantee complete removal of file infectors
. Even vendors like Kaspersky say there is no guarantee
that some files will not get corrupted during the disinfection process. In my experience, users may find their system performing better for a short time after attempted disinfection only to have it become progressively worst again as the malware continues to reinfect thousands of files. Some folks will try every tool or rescue disk they can find in futile attempts to repair critical system files. If something goes awry during the malware removal process the computer may become unstable or unbootable
and you could loose access to all your data. In the end most folks end up reformatting out of frustration after spending hours attempting to repair and remove the infected files.
Since file infectors are often seen with backdoor Trojans
your machine has likely been compromised
and there is no way to be sure the computer can ever be trusted again. It is dangerous and incorrect to assume the computer is secure even if the infection appears to have been removed
Many experts in the security community believe that once infected with such malware, the best course of action is to wipe the drive clean, reformat
and reinstall the OS. I cannot add any more to this Microsoft TechNet article: Help: I Got Hacked. Now What Do I Do?