How to Remove W32.Sality.W Without Recurring - Removal Tips

Hi. I keep getting W32.Sality.W virus in a .tmp file (Windows 7 OS). It gets quarantined but then it comes back a day or two later. Re-quarantined. Then back. I doubt I'm getting it from going to a site since I typically only go to the most popular sites like CNN/ESPN/Weather. So something on my PC keeps making it come back. I ran power eraser and it found nothing. Any ideas?

Information of W32.Sality.W

W32.Sality.W is an infection from Virus:Win32/Sality family. Threats in this family can steal your sensitive information,download and run other files,delete security-related files from your PC,lower your PC security settings. This virus can get into the computer along with email programs, instant messaging programs, file-sharing programs, social networking sites, removable drives with Autorun enabled, software vulnerabilities, etc.

This file infector targets files with extensions .SCR or .EXE. This virus can run a damaging payload that deletes files with certain extensions or beginning with specific strings. Once gets into the computer, W32.Sality.W will change the computer setting. When you start the computer, W32.Sality.W will run automatically at the background without any consent. It can connect to the Internet in order to request data and download files. It is suggested to uninstall W32.Sality.W as soon as possible to prevent further damage. And it is recommended to keep a powerful and well-known antivirus program like Spyhunter to protect your computer.

Instrcution to remove W32.Sality.W

Method 1: Manual removal

Step 1: Press CTRL+ALT+DEL or CTRL+SHIFT+ESC to open Windows Task Manager and close all the related running processes.

  

Step 2: Remove W32.Sality.W from control panel.

1) On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel.

 

Windows Vista/7/8: Click Uninstall a Program.

Windows XP: Click Add or Remove Programs.

2) When you find the program W32.Sality.W, click it, and then do one of the following:

Windows Vista/7/8: Click Uninstall.

Windows XP: Click the Remove or Change/Remove tab (to the right of the program).

Step 3 Go to the Registry Editor and remove all the infection registry entries listed here:

(Steps: Hit Win+R keys and then type regedit in Run box to search)

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing "NewTabPageShow" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Start Page" = "http://www.<random>.com/?type=hp&ts=<timestamp>&from=tugs&uid=<hard drive id>"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes "DefaultScope" = "{33BB0A4E-99AF-4226-BDF6-49120163DE86}"

Method 2: Automatic Removal with SpyHunter

SpyHunter is a world-famous real-time malware protection and removal tool, which is designed to detect , remove and protect your PC from the latest malware attacks, such as Trojans, worms, rootkits, rogue viruses, browser hijacker, ransomware, adware, key-loggers, and so forth. 

Step 1: Press the following button to download SpyHunter.

Step 2: InstallSpyHunter on your computer.

Step 3:  Scan computer now!

Step 4:  Select all and then Remove to delete all threats.

Note: Manual removal is very difficult. If you don’t have sufficient expertise in dealing with the manual removal, it is suggested to Install Spyhunter to remove viruses safely and quickly.