Categories: Virus

Sality.Virus.FileInfector.DDS malicious file

The Sality.Virus.FileInfector.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Sality.Virus.FileInfector.DDS virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Sality.Virus.FileInfector.DDS?


File Info:

crc32: 2B5E423Amd5: 458de8223eb7eb45431b8eae2f081f63name: 458DE8223EB7EB45431B8EAE2F081F63.mlwsha1: 2cab9d07278a49dbea5b3440688fb892bb9b0536sha256: f93d9f4d6c0ddb6ab6e1eb7f3d38fd2ce7f79908aede7f06c53f472f9c936d53sha512: 107c3024000ecd58253f48c1879b40560cc9800365674d180ce749babc4704a11da0b687d1f8aa810eaf72984724584effa610e7a924f89b8de9bdc62e0a5636ssdeep: 49152:cxHoph7GBfWLhseR8vYhxHoph7GBfWLhseR8vzT:H77GBfWLhseRHI77GBfWLhseRyTtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.InternalName: SAPISVR5FileVersion: 5.1.4111.00 (XPClient.010817-1148)CompanyName: Microsoft CorporationProductName: Microsoftxae Windows(TM) Operating SystemProductVersion: 5.1.4111.00 FileDescription: SAPISVR 5OriginalFilename: SAPISVR5Translation: 0x0409 0x04b0

Sality.Virus.FileInfector.DDS also known as:

Elastic malicious (high confidence)
MicroWorld-eScan Trojan.Generic.11103039
FireEye Generic.mg.458de8223eb7eb45
ALYac Trojan.Generic.11103039
Malwarebytes Sality.Virus.FileInfector.DDS
Sangfor Malware
BitDefender Trojan.Generic.11103039
CrowdStrike win/malicious_confidence_80% (D)
Baidu Win32.Worm.Agent.u
Symantec ML.Attribute.HighConfidence
APEX Malicious
Paloalto generic.ml
ClamAV Win.Malware.Kolabc-6736261-0
Kaspersky HEUR:Trojan.Win32.Generic
NANO-Antivirus Trojan.Win32.TrjGen.fanttn
Ad-Aware Trojan.Generic.11103039
Emsisoft Trojan.Generic.11103039 (B)
Comodo Malware@#vuc2pl3ph1n0
DrWeb Trojan.Siggen5.28081
Sophos Mal/Generic-S
Avira WORM/Kolab.332158
Arcabit Trojan.Generic.DA96B3F
ZoneAlarm HEUR:Trojan.Win32.Generic
GData Win32.Trojan-Dropper.Rbot.A
Cynet Malicious (score: 100)
AhnLab-V3 Win-Trojan/Facelabc.Gen
BitDefenderTheta Gen:NN.ZexaE.34804.8n3@aqtZ6Bgi
MAX malware (ai score=81)
VBA32 Exploit.RpcDcom
Tencent Virus.Win32.Kolabc.aad
SentinelOne Static AI – Malicious PE
eGambit Trojan.Generic
Fortinet W32/Kolabc.GU!worm.im
Cybereason malicious.23eb7e
Panda Trj/Genetic.gen
Qihoo-360 HEUR/Malware.QVM06.Gen

How to remove Sality.Virus.FileInfector.DDS?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

SpamTool.HackTool.SpamBot.DDS malicious file

The SpamTool.HackTool.SpamBot.DDS is considered dangerous by lots of security experts. When this infection is active,…

1 min ago

UDS:Trojan-Downloader.Win32.Agent.xxzvud removal

The UDS:Trojan-Downloader.Win32.Agent.xxzvud is considered dangerous by lots of security experts. When this infection is active,…

6 mins ago

Malware.AI.406487220 malicious file

The Malware.AI.406487220 is considered dangerous by lots of security experts. When this infection is active,…

13 mins ago

Trojan.PWS.OnlineGames.KDXA information

The Trojan.PWS.OnlineGames.KDXA is considered dangerous by lots of security experts. When this infection is active,…

57 mins ago

Trojan:Win32/Koutodoor!pz removal tips

The Trojan:Win32/Koutodoor!pz is considered dangerous by lots of security experts. When this infection is active,…

57 mins ago

About “Trojan:Win32/Regrun!pz” infection

The Trojan:Win32/Regrun!pz is considered dangerous by lots of security experts. When this infection is active,…

58 mins ago