The developer, sUBs, is currently looking into what happened and when I have a full update, I will be sure to let you know. From the limited information that I have, it appears that the affected version has been available since approximately 2am EST on January 29th, but it may have been earlier. If this timeframe changes, I will update this topic to let you know. If you have used a new copy of ComboFix in the last day or so, then you should examine your system for possible infection. If you have used a copy of ComboFix prior to this version, then you should be ok.
SHA256 Hashes of known affected versions are:
In the meantime, it is important for those who may have used ComboFix recently and are concerned they are infected to get the help they need. As the Sality infection has been around for a while, almost all antivirus vendors will have detected it and blocked it when you ran ComboFix. Unfortunately, not everyone has up-to-date virus definitions or uses an AV program, so it is important to examine your system if you have downloaded a new copy and used it since 2am EST.
The steps we suggest you take to make sure your computer is not infected are:<p>
- Scan your computer with ESET's Online Scanner.
- Download and scan your computer with the Kaspersky Rescue Disk
- Use SalityKiller if you are unable to use the above tools for some reason. When using this tool, you should disconnect from your network first.
- Use AVG Sality Remover Tool. When using this tool, you should disconnect from your network first.