Virus

Virus.Sality removal

Malware Removal

The Virus.Sality is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Virus.Sality virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Russian
  • Tries to unhook or modify Windows functions monitored by Cuckoo
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Virus.Sality?


File Info:

crc32: 225C59CC
md5: 6805ad2ee4b181a74d29dfd74f01a313
name: 6805AD2EE4B181A74D29DFD74F01A313.mlw
sha1: 034a00c98dc6523148cfdd11c5938f1e86e48e51
sha256: 97640620687649993a14cb2922b5d984ebb215a79b70b7c4b0b82f66203dafd1
sha512: e973026564e12fa01138f6d3c053e4fc272a3f3712f2d223d435caa9983fba1b3e3c134f489566db72a81de70b91492c22c19a46b8c067eea447462906c41c54
ssdeep: 3072:OpaCd1eY/NfQt63xQ3F81DcZcPMCQFK+pXb5Q7/hmu84III:iRd1eSZQt0Q3F8tF2rZ67/hmn
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Virus.Sality also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0055e4051 )
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop1.64009
CynetMalicious (score: 100)
CylanceUnsafe
ZillyaTrojan.Diple.Win32.88408
SangforVirus.Win32.Ramnit.8
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Ramnit.b558431d
K7GWTrojan ( 0055e4051 )
Cybereasonmalicious.98dc65
SymantecDownloader.Lofog!gen2
ESET-NOD32Win32/Ramnit.F
APEXMalicious
AvastWin32:MalOb-IJ [Cryp]
NANO-AntivirusTrojan.Win32.Diple.cqonlh
ViRobotTrojan.Win32.A.Diple.159087
TencentWin32.Virus.Ramnit.Wmsr
SophosMal/Generic-S
ComodoTrojWare.Win32.TrojanSpy.Zbot.G@2tckk5
BitDefenderThetaGen:NN.ZexaF.34686.qqX@aegY4Rgc
VIPRETrojan.Win32.Bamital.i (v)
TrendMicroTROJ_KRYPTK.SM12
McAfee-GW-EditionW32/Bamital.j
FireEyeGeneric.mg.6805ad2ee4b181a7
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Diple.dlw
AviraTR/Crypt.XPACK.Gen
eGambitGeneric.Malware
MicrosoftTrojan:Win32/Ramnit.A
AegisLabTrojan.Win32.Diple.4!c
ZoneAlarmTrojan.Win32.Diple.jne
Acronissuspicious
McAfeeW32/Bamital.j
MAXmalware (ai score=99)
VBA32OScope.Trojan-Ransom.PornoBlocker
MalwarebytesVirus.Sality
PandaGeneric Malware
TrendMicro-HouseCallTROJ_KRYPTK.SM12
RisingVirus.Ramnit!8.4 (CLOUD)
YandexTrojan.Diple!iRYcmYUtXa0
IkarusTrojan-Ransom.PornoBlocker
FortinetW32/Bamital.FA!tr
AVGWin32:MalOb-IJ [Cryp]
Paloaltogeneric.ml

How to remove Virus.Sality?

Virus.Sality removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment