Dropped:Win32.Sality.RA (B) removal instruction

The Dropped:Win32.Sality.RA (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Dropped:Win32.Sality.RA (B) virus can do?

• Sample contains Overlay data
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• The executable is compressed using UPX
• Authenticode signature is invalid
• Deletes executed files from disk
• Yara detections observed in process dumps, payloads or dropped files

How to determine Dropped:Win32.Sality.RA (B)?

File Info:
name: 9F34CC12EE4AC64B95F7.mlw
path: /opt/CAPEv2/storage/binaries/ac7a023f0fa18159378610b460c407c775b45a5f9ac95bc8d661b4178a4c0836
crc32: 5BF40A19
md5: 9f34cc12ee4ac64b95f7a38836578ee7
sha1: 3ae6d3645b33bcdb8761d463522cbf70e7388ec3
sha256: ac7a023f0fa18159378610b460c407c775b45a5f9ac95bc8d661b4178a4c0836
sha512: 7d4a14abc2467e903b69f91bae1dabdee4cc7a08b7e5e72e8272c5c5293177ac3b94069d9bba3f09c0ce1ef2a11037731865246f28e13f58cc7a7a7d9a8528cc
ssdeep: 3072:reN0LwH/hUmnWac5jglEWWqDHwf1O4oSZdIW/834ip6P3zPPMpSE:reNxPopWWqLo9oSZbiU/z2SE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T164E36C1232F98934F4F23EB89BBC95218A75BCA16F35D3DF2240565F5A70A948D30B27
sha3_384: 32e520664ad8b4575667670eab91c38423dce6c7a29c7b3cac0427c2a6f59cf809f917d26df827b932a09d9e2559f6d8
ep_bytes: 60e8000000005883e83d508db800b0fc
timestamp: 2003-09-28 00:37:23

Version Info:
0: [No Data]

Dropped:Win32.Sality.RA (B) also known as:

How to remove Dropped:Win32.Sality.RA (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.