Virus

What is “Virus.Win32.Sality.bakc”?

Malware Removal

The Virus.Win32.Sality.bakc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Virus.Win32.Sality.bakc virus can do?

  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Virus.Win32.Sality.bakc?


File Info:

crc32: F2A7D89A
md5: 60dcc02a0011f0d0eee798e68281cbb2
name: silverlight5.exe
sha1: da57a9880359ee33b1a596f9d6b13ca358c1c363
sha256: 9328c9c361d0cb2667c4913c11a996df585d2e18ff51678eb139dfff08957396
sha512: df7a170ea88d954abfd1f599a7224ef35de9d29d639635d85c3f09d4462f864bf2563a18236f4461901d105062fe0784b92076ce0d6c22051208fb4bf3f3b6f7
ssdeep: 196608:keq3LHDo8nIePqDLuUTlEThIhV1swKuVZ4i:keGbU8nITLuUPudQR
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: SFXCAB.EXE
FileVersion: 5.1.10411.0
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 5.5.0031.0
FileDescription: Self-Extracting Cabinet
OriginalFilename: SFXCAB.EXE
Translation: 0x0409 0x04b0

Virus.Win32.Sality.bakc also known as:

BkavW32.Sality.PE
MicroWorld-eScanWin32.Sality.3
FireEyeGeneric.mg.60dcc02a0011f0d0
CAT-QuickHealW32.Sality.U
Qihoo-360Virus.Win32.Sality.I
McAfeeW32/Sality.gen.z
CylanceUnsafe
VIPREVirus.Win32.Sality.at (v)
SangforMalware
K7AntiVirusVirus ( f10001071 )
BitDefenderWin32.Sality.3
K7GWVirus ( f10001071 )
Cybereasonmalicious.a0011f
TrendMicroPE_SALITY.RL
BaiduWin32.Virus.Sality.gen
F-ProtW32/Sality.gen2
SymantecW32.Sality.AE
TotalDefenseWin32/Sality.AA
APEXMalicious
AvastWin32:SaliCode
GDataWin32.Virus.Sality.A
KasperskyVirus.Win32.Sality.gen
AlibabaVirus:Win32/Sality.abf4ea0b
NANO-AntivirusVirus.Win32.Sality.beygb
ViRobotWin32.Sality.Gen.A
AegisLabVirus.Win32.Sality.v!c
RisingVirus.Sality!1.A5BD (CLASSIC)
Ad-AwareWin32.Sality.3
SophosMal/Sality-D
ComodoVirus.Win32.Sality.gen@1egj5j
F-SecureMalware.W32/Sality.AT
DrWebWin32.Sector.30
ZillyaVirus.Sality.Win32.25
Invinceaheuristic
McAfee-GW-EditionW32/Sality.gen.z
EmsisoftWin32.Sality.3 (B)
IkarusSality.Win32
CyrenW32/Sality.gen2
JiangminWin32/HLLP.Kuku.poly2
AviraW32/Sality.AT
MAXmalware (ai score=82)
Endgamemalicious (high confidence)
ArcabitWin32.Sality.3
ZoneAlarmVirus.Win32.Sality.gen
MicrosoftVirus:Win32/Sality.AT
AhnLab-V3Win32/Kashu.E
Acronissuspicious
TACHYONVirus/W32.Sality.D
VBA32Virus.Win32.Sality.bakc
PandaW32/Sality.AA
ZonerTrojan.Win32.Sality.22009
ESET-NOD32Win32/Sality.NBA
TrendMicro-HouseCallPE_SALITY.RL
TencentVirus.Win32.TuTu.Gen.200004
YandexWin32.Sality.BL
SentinelOneDFI – Malicious PE
FortinetW32/Sality.BH
BitDefenderThetaAI:FileInfector.A5ECCBAB0E
AVGWin32:SaliCode
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecureVirus.Sality.BH

How to remove Virus.Win32.Sality.bakc?

Virus.Win32.Sality.bakc removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment