According to Marcos, employee of security solutions vendor ESET, the well-known malware cleaning/removal program ComboFix created by sUBs is infected with the Sality virus. It seems that the current installer ComboFix contains an infected file, namely iexplore.exe
I haven’t checked the issue, however have to assume that ComboFix is indeed infected with the Sality virus, especially because other security vendors have confirmed the infection.
Please don’t download and use ComboFix until the author, sUBs, remedies the issue.
UPDATE 1: Infection is confirmed by a reliable source.
UPDATE 2: To be 100% sure I checked the issue by myself, ComboFix is indeed infected by Sality.
UPDATE 3: Added a temporary Google Drive downloadlink to obtain most recent CLEAN ComboFix.exe
Data of this clean version:
MD5 CHECKSUM: 0F6D28A70471051C4C7785335ACBA626
UPDATE 4 / FINAL UPDATE / 2013-01-30 22:00: problem infected ComboFix solved, clean ComboFix.exe is now live again, and available to download from its normal Bleeping Computer downloadlink here.
Because the problem is now solved I have removed the temporary downloadlink clean ComboFix.exe