momenmkadry 0 Posted October 5, 2020 Share Posted October 5, 2020 I downloaded ESET Internet Security recently to do a checkup scan on my device and it deleted all of my games' files and when I try to restore any file it tells me that it failed. I attached a photo of it here. please help. Link to comment Share on other sites More sharing options...
Most Valued Members shocked 60 Posted October 5, 2020 Most Valued Members Share Posted October 5, 2020 and it did a really good job, judging by the image they were viruses, https://www.virusradar.com/en/Win32_Sality.NBA/description anyway, did those files exist in a removable drive? Link to comment Share on other sites More sharing options...
Administrators Marcos 4,693 Posted October 5, 2020 Administrators Share Posted October 5, 2020 Sality is a file infecting virus, the detection is correct. Restoring files probably failed because already clean versions of the files exist in the target location. shocked 1 Link to comment Share on other sites More sharing options...
itman 1,538 Posted October 5, 2020 Share Posted October 5, 2020 (edited) I will also add all external drives that have been attached to this PC should also be scanned: Quote Spreading on removable media The virus copies itself into the root folders of removable drives using a random filename. The filename has one of the following extensions: .exe .pif .cmd The following file is dropped in the same folder: autorun.inf The AUTORUN.INF file contains the path to the malware executable. Thus, the virus ensures it is started each time infected media is inserted into the computer. Edited October 5, 2020 by itman Link to comment Share on other sites More sharing options...
momenmkadry 0 Posted October 6, 2020 Author Share Posted October 6, 2020 ok I understand it about the salty virus part but some mods and game exe files got deleted too. Could it be that the virus replaced the exe ? Link to comment Share on other sites More sharing options...
Administrators Marcos 4,693 Posted October 6, 2020 Administrators Share Posted October 6, 2020 Viruses infect existing legitimate files. They either append or pre-pend their code and modify the entry point to make sure that the code is executed. If you ran a file that was cleaned by ESET and it failed to run, please email it to samples[at]eset.com, ideally along with the original version of the file. Some viruses infect files in an irreversible way and restoring them to the original form is not possible. Link to comment Share on other sites More sharing options...
momenmkadry 0 Posted October 7, 2020 Author Share Posted October 7, 2020 How do I do that? email a sample of the exe? Link to comment Share on other sites More sharing options...
Administrators Marcos 4,693 Posted October 7, 2020 Administrators Share Posted October 7, 2020 The best would be to email a pair of a detected and a cleaned file that doesn't run after cleaning in an archive encrypted with the password "infected". Link to comment Share on other sites More sharing options...
momenmkadry 0 Posted October 7, 2020 Author Share Posted October 7, 2020 OK then I'll see what I'll do thanks. Link to comment Share on other sites More sharing options...
Recommended Posts