Jump to content
  • Announcements

    • Rodion Nagornov

      Долгое сохранение сообщений || Delays while posting (click here to read the full text RU/EN)   09/20/2017

      Due to some technical reasons visual delays are possible while message sending. Actually your message is published immediately - just interface works long. In such case, please, do not re-send your message immediately! Press F5 to reload the page and check if your message/topic is published. || По техническим причинам возможно визуально долгое отправление сообщений на форуме. Фактически ваше сообщение публикуется мгновенно - долго отрабатывает графика. В случае подобной ситуации, пожалуйста, сначала обновите страницу (F5) и проверьте, появилось ли ваше сообщение. Не пытайтесь сразу отправить его заново.
mohammadsahand

win32.sality.aa infected

Recommended Posts

hello to all of you good guys

i have a serve with 4 clients, few days ago when i wanted to open my net program in server from clients kaspersky alert me this virus (WIN32.SALITY.AA) and blocked my net transfer so i check the server and saw server's kaspersky has been disabled so i done these :

1-reopening kis (didnot work)

2-use of portable anti-virus version (instantly closed by virus)

3-opening taskmgr from gpedit.msc and closeing all of uknown process then Number:1;2 (didnot work)

4-scanning hard with a second clean hard (didnot work because i made a RAID I for my hards)

 

AND FORMATTING HARD IS IMPOSIBLE (BECAUSE I HAVE IMPORTANT INFO AND SOFTWARE IN MY SERVER THAT THEY ARE NOT REPLACEABLE)

 

PLEASE help me in this predicament http://forum.kaspersky.com/style_emoticons/default/dash1.gif

 

Share this post


Link to post
vulnerabilities are not viruses: http://forum.kaspersky.com/index.php?s=&am...st&p=633369

sality was only detected in system restore so it was probably removed, disable system restore and do another full scan, any detections afterwards?

try reinstalling kis and be sure it's 8.0.0.506 afterwards and also post a gsi log should it not work: http://forum.kaspersky.com/index.php?showtopic=36444

 

what i do now?

i dont want to make new window system

i just do one but unfortionately i opend virused cd

so some files r corupted

like what in the attachment photo

post-146897-1228945068_thumb.jpg

Share this post


Link to post
what i do now?

i dont want to make new window system

i just do one but unfortionately i opend virused cd

so some files r corupted

like what in the attachment photo

Just disable system restore like already posted and then reboot...................it will be gone and then do a scan.

Share this post


Link to post
hello

where does kaspersky detect it? in which files?

 

D:\WINDOWS\system32\drivers\mplkkn.sys

 

i use kis 8.0.0.506 with latest updates. this virus was detected in my pc in path above. but the status is "Not found"

i did all instruction i found here and other websites but was not effective. i can't run scan in safe mode,(it reboots when i run in safe mode).

 

somebody help me please!

Edited by Damas

Share this post


Link to post
Guest
This topic is now closed to further replies.

×