Categories: Trojan

Should I remove “Trojan:WinNT/Sality”?

The Trojan:WinNT/Sality is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:WinNT/Sality virus can do?

Starts servers listening on 0.0.0.0:5434
A process attempted to delay the analysis task by a long amount of time.
Installs itself for autorun at Windows startup
Operates on local firewall’s policies and settings
Attempts to disable UAC
Attempts to modify or disable Security Center warnings
Attempts to block SafeBoot use by removing registry keys
Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Trojan:WinNT/Sality?


File Info:
crc32: 5E465608md5: 8e45ae7435a3e3ff7db20fce16c6ab16name: 8E45AE7435A3E3FF7DB20FCE16C6AB16.mlwsha1: d4be92f7aaaafbefc42ce4e345b9c10a75a39397sha256: 8b6787437b161a5656c3b5f0e8db1f4514841853bc6ca6833947dc2f6981280fsha512: 15490c47c3593cb1fe68593c0b9be56beaf71338fd72b63941d5f8ff81cc82e7993efb3a8b1a1b1bdd48c78e275724261cc5f1c427fbcba9e60b16e785d9c7b1ssdeep: 3072:oBhs0M++H3RrR2DMTtqvqWIVdC0i9EoX+Tr:oBhsXhRrRygtqvqWAdC0loX+Trtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Trojan:WinNT/Sality also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0002183d1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.NtRootKit.6725
Cynet	Malicious (score: 100)
ALYac	GenPack:Generic.Malware.PfDYVdPk!1g.465D0803
Cylance	Unsafe
Zillya	Trojan.Blocker.Win32.24595
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Blocker.c500e4d7
K7GW	Trojan ( 0002183d1 )
Cybereason	malicious.435a3e
Baidu	Win32.Trojan.Small.a
Cyren	W32/Risk.XEEJ-1396
Symantec	W32.Sality.AE
ESET-NOD32	a variant of Win32/Sality.NAQ
APEX	Malicious
TotalDefense	Win32/Maazben!generic
Avast	Win32:Agent-APKD [Trj]
ClamAV	Win.Trojan.Crypt-6607
Kaspersky	Trojan-Ransom.Win32.Blocker.gfhu
BitDefender	GenPack:Generic.Malware.PfDYVdPk!1g.465D0803
NANO-Antivirus	Trojan.Win32.Blocker.ezjand
MicroWorld-eScan	GenPack:Generic.Malware.PfDYVdPk!1g.465D0803
Tencent	Win32.Virus.Sality.Eckj
Ad-Aware	GenPack:Generic.Malware.PfDYVdPk!1g.465D0803
Sophos	Mal/Generic-S
Comodo	Malware@#q3qm220gnq6x
BitDefenderTheta	AI:Packer.C7551F7E1E
VIPRE	Trojan.Win32.Pakes.bxp (fs)
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.dz
FireEye	Generic.mg.8e45ae7435a3e3ff
Emsisoft	GenPack:Generic.Malware.PfDYVdPk!1g.465D0803 (B)
SentinelOne	Static AI – Malicious PE
Avira	WORM/Rbot.Gen
eGambit	Unsafe.AI_Score_100%
Microsoft	Trojan:WinNT/Sality
Arcabit	GenPack:Generic.Malware.PfDYVdPk!1g.465D0803
ZoneAlarm	Trojan-Ransom.Win32.Blocker.gfhu
GData	GenPack:Generic.Malware.PfDYVdPk!1g.465D0803
AhnLab-V3	Trojan/Win32.Blocker.R306984
Acronis	suspicious
McAfee	W32/Sality-FPK!8E45AE7435A3
MAX	malware (ai score=87)
VBA32	Hoax.Blocker
Malwarebytes	Malware.AI.2438198022
Panda	Trj/CI.A
Rising	Malware.Heuristic!ET#88% (RDMK:cmRtazo7/hP8yRSI5/d6hzi522/O)
Ikarus	Trojan.Win32.Small
Fortinet	W32/Sality.AG!tr
AVG	Win32:Agent-APKD [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Blocker.HgIASOgA