Virus

Virus.Win32.Sality (file analysis)

Malware Removal

The Virus.Win32.Sality is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Virus.Win32.Sality virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)

How to determine Virus.Win32.Sality?


File Info:

crc32: 27FEED77
md5: 11a69c0c646ed467144d005f4d873e99
name: instwiz3.exe
sha1: 3d3e1215bdf8c9d9cadacf040bb406c203a8b503
sha256: ddc7106f3e6042758ae7ebb86dfc838550204531a3cf410b8cec985cdd69e31d
sha512: 0414e8ed8f436bf44af8b65c298f2db1f24b952aa91ac9093258253d96550d056c0259fbe9ba306e889cbb3fe3ef36df9fd607f98c5ebe6040df131af17fb2ba
ssdeep: 6144:hG7Qw+SeXdPrYm0SH8tGybDceIRmvNQPtqK4EqxjA:wkrrH8thL6VqKcc
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2007 Beijing Senselock
InternalName: InstWiz
FileVersion: 2, 4, 1, 3
CompanyName: Beijing Senselock Corp.
SpecialBuild: 1981
ProductVersion: 2, 4, 1, 3
FileDescription: setup
OriginalFilename: InstWiz3.EXE
Translation: 0x0409 0x04b0

Virus.Win32.Sality also known as:

BkavW32.Sality.PE
MicroWorld-eScanWin32.Sality.3
FireEyeGeneric.mg.11a69c0c646ed467
CAT-QuickHealW32.Sality.U
Qihoo-360Virus.Win32.Sality.I
McAfeeW32/Sality.gen.z
CylanceUnsafe
VIPREVirus.Win32.Sality.at (v)
SangforMalware
K7AntiVirusVirus ( f10001071 )
BitDefenderWin32.Sality.3
K7GWVirus ( f10001071 )
Cybereasonmalicious.c646ed
TrendMicroPE_SALITY.RL
BitDefenderThetaAI:FileInfector.A5ECCBAB0E
F-ProtW32/Sality.gen2
SymantecW32.Sality.AE
ESET-NOD32Win32/Sality.NBA
BaiduWin32.Virus.Sality.gen
APEXMalicious
Paloaltogeneric.ml
GDataWin32.Sality.3
KasperskyVirus.Win32.Sality.gen
AlibabaVirus:Win32/Sality.5c8fbd6e
NANO-AntivirusVirus.Win32.Sality.beygb
ViRobotWin32.Sality.Gen.A
AegisLabVirus.Win32.Generic.n!c
RisingVirus.Sality!1.A5BD (CLOUD)
Ad-AwareWin32.Sality.3
SophosMal/Sality-D
ComodoVirus.Win32.Sality.gen@1egj5j
F-SecureMalware.W32/Sality.AT
DrWebWin32.Sector.30
ZillyaVirus.Sality.Win32.25
Invinceaheuristic
McAfee-GW-EditionW32/Sality.gen.z
EmsisoftWin32.Sality.3 (B)
IkarusVirus.Win32.Sality
CyrenW32/Sality.gen2
JiangminWin32/HLLP.Kuku.poly2
WebrootW32.Sality
AviraW32/Sality.AT
MAXmalware (ai score=88)
Antiy-AVLVirus/Win32.Sality.gen
KingsoftWin32.Sality.lx.368640
Endgamemalicious (high confidence)
ArcabitWin32.Sality.3
AhnLab-V3Win32/Kashu.E
ZoneAlarmVirus.Win32.Sality.gen
MicrosoftVirus:Win32/Sality.AT
TotalDefenseWin32/Sality.AA
Acronissuspicious
VBA32Virus.Win32.Sality.bakc
TACHYONVirus/W32.Sality.D
PandaW32/Sality.AA
ZonerTrojan.Win32.Sality.22009
TrendMicro-HouseCallPE_SALITY.RL
TencentVirus.Win32.TuTu.Gen.200004
YandexWin32.Sality.BL
SentinelOneDFI – Malicious PE
FortinetW32/Sality.BH
AVGWin32:SaliCode
AvastWin32:SaliCode
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecureVirus.Sality.BH

How to remove Virus.Win32.Sality?

Virus.Win32.Sality removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment