mohammadsahand

win32.sality.aa infected

11 posts in this topic

hello to all of you good guys

i have a serve with 4 clients, few days ago when i wanted to open my net program in server from clients kaspersky alert me this virus (WIN32.SALITY.AA) and blocked my net transfer so i check the server and saw server's kaspersky has been disabled so i done these :

1-reopening kis (didnot work)

2-use of portable anti-virus version (instantly closed by virus)

3-opening taskmgr from gpedit.msc and closeing all of uknown process then Number:1;2 (didnot work)

4-scanning hard with a second clean hard (didnot work because i made a RAID I for my hards)

 

AND FORMATTING HARD IS IMPOSIBLE (BECAUSE I HAVE IMPORTANT INFO AND SOFTWARE IN MY SERVER THAT THEY ARE NOT REPLACEABLE)

 

PLEASE help me in this predicament http://forum.kaspersky.com/style_emoticons/default/dash1.gif

 

Share this post


Link to post
Share on other sites

hello

where does kaspersky detect it? in which files?

Share this post


Link to post
Share on other sites

vulnerabilities are not viruses: http://forum.kaspersky.com/index.php?s=&am...st&p=633369

sality was only detected in system restore so it was probably removed, disable system restore and do another full scan, any detections afterwards?

try reinstalling kis and be sure it's 8.0.0.506 afterwards and also post a gsi log should it not work: http://forum.kaspersky.com/index.php?showtopic=36444

Share this post


Link to post
Share on other sites
vulnerabilities are not viruses: http://forum.kaspersky.com/index.php?s=&am...st&p=633369

sality was only detected in system restore so it was probably removed, disable system restore and do another full scan, any detections afterwards?

try reinstalling kis and be sure it's 8.0.0.506 afterwards and also post a gsi log should it not work: http://forum.kaspersky.com/index.php?showtopic=36444

 

what i do now?

i dont want to make new window system

i just do one but unfortionately i opend virused cd

so some files r corupted

like what in the attachment photo

post-146897-1228945068_thumb.jpg

Share this post


Link to post
Share on other sites
what i do now?

i dont want to make new window system

i just do one but unfortionately i opend virused cd

so some files r corupted

like what in the attachment photo

Just disable system restore like already posted and then reboot...................it will be gone and then do a scan.

Share this post


Link to post
Share on other sites
hello

where does kaspersky detect it? in which files?

 

D:\WINDOWS\system32\drivers\mplkkn.sys

 

i use kis 8.0.0.506 with latest updates. this virus was detected in my pc in path above. but the status is "Not found"

i did all instruction i found here and other websites but was not effective. i can't run scan in safe mode,(it reboots when i run in safe mode).

 

somebody help me please!

Edited by Damas

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.