I got sality.au, how do I remove it??

[Moneyman]

Guys, major prob here: I got the windows32:Sality.AU worm.
Does anyone know how to remove it? I googled all over but haven't found a solution to it.

 

[Scarface]

Quick Guide to Remove Worm:Win32/Sality.AU Manually:

step1: You need to stop Worm:Win32/Sality.AU processes in the windows task manager first.
Step2: Search and delete these Worm:Win32/Sality.AU registry entries in the Registry Editor:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
cieri = “%UserProfile%\cieri.exe /o”
cieri = “%UserProfile%\cieri.exe /c”

Guide To Open Registry Editor

Third step: Remove all Worm:Win32/Sality.AU associated files listed below:

%UserProfile%\cieri.exe

-- 14 Apr 2013, 07:40 --

 

[LunarScorpio]

Moved to a more suitable forum. 🙂

 

[iPhonefreak]

Throw the computer out the window and buy a Mac. 🙂

But really, does a antivirus not pick it up? Try downloading Norton power eraser. It's a free download

 

[Moneyman]

My antivirus is a paid AVG software. I don't know why but each time it attempts to remove the virus, there is an error. Seems like this one was strong.

Basically it copied all of my harddrive to the recycle bin. Had to delete 100k+ files, lol. XD

But then I finally found it, and manually squashed it. Awesome stuff.

 

[iPhonefreak]

Glad you found it.

Norton Power Eraser is the strong stuff as well, so if you get it again try that.

 

[Pvcomputers]

By having a quick Google search, looks like you are screwed if you are on a large network as spreads from network shares.

Here is a Microsoft link on how to deal with it.
http://www.microsoft.com/security/porta ... fsality.au

 

[RTC01]

My antivirus is a paid AVG software. I don't know why but each time it attempts to remove the virus, there is an error. Seems like this one was strong.

Basically it copied all of my harddrive to the recycle bin. Had to delete 100k+ files, lol. XD

But then I finally found it, and manually squashed it. Awesome stuff.

I would recommend Avira or Avast to AVG..

Just my recommendation. There is a lot of stuff AVG misses or cant remove.

 

[Moneyman]

I'm getting this again. Each minute it comes up again, and it's more than annoying. Any help please?

 

[mav3n]

Why not backup all of your important files and just reformat your harddrive? I mean it gets rid of the worm and gives you a new start. I mean that worm is well known for spreading to the .exe files on your computer, so when you start those, it spreads more. It's more of a hassle to try to find it than to just remove EVERYTHING. This is probably why it came back. It infected a .exe file, and you ran it.

 

[Moneyman]

Oh my god.
Norton Power Eraser almost killed every .exe file I have on my system, and those are my paid games, paid programs and so on.
I really don't know. This is reaaaaally bad.

 

[Moneyman]

Aaaaaand... of course it deleted my privileges (Norton Power Eraser).
Curse Norton. The application of the anti-virus is a virus itself.

 

[Moneyman]

Oh my god... Norton even somehow managed to disable my administrator rights to my computer.. This ain't true..
I HATE NORTON!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

 

[mav3n]

Like I said, just reformat the computer...it will remove all the problems you have.

 

[Deleted member 1609]

Like I said, just reformat the computer...it will remove all the problems you have.

This is going to be the easiest solution by far.

 

[RTC01]

Try posting your problem at GeeksToGo.

They have trained volunteers that can help you get rid of viruses and other problems by analyzing your HJT logs and providing step by step removal instructions for free..

I used to be one of their experts-in-training years ago.. and definitely recommend them.