Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
123 entries found. Displaying page 1 of 7.
Updated on Apr 11, 2011
Virus:Win32/Sality.G is the detection for files that have been infected by Virus:Win32/Sality.G.dll.
 
Virus:Win32/Sality.G and Virus:Win32/Sality.G.dll are variants if the Virus:Win32/Sality, a family of polymorphic file infectors that target Windows executable files with extensions .SCR or .EXE. They may execute a damaging payload that deletes files with certain extensions and terminates security-related processes and services. They may also download and execute arbitrary files from a remote server.
For more information, please see the detailed Virus:Win32/Sality family descriptionelsewhere in the encyclopedia.
Also detected as: Infected: Virus:Win32/Sality.gen!enc(Microsoft)
Alert level: severe
Updated on May 05, 2016

Windows Defender detects and removes this threat.

This malware family can steal your personal information and lower your PC security settings. 

Threats in this family can:
  • Stop your security software from running
  • Steal your sensitive information
  • Download and run other files
  • Delete security-related files from your PC
  • Lower your PC security settings

Find out ways that malware can get on your PC.

Alert level: severe
Updated on Oct 10, 2013
Windows Defender Antivirus detects and removes this threat.
 
This threat is a driver used by the Win32/Sality family to disable any hooks into the system service descriptor table (SSDT).
Alert level: severe
Updated on Sep 17, 2013

Microsoft security software detects and removes this threat.

This virus is a member of the Win32/Sality family. This family can delete Windows files with the extensions .scr or .exe.

They can also end or close antivirus software and other security-related processes and services.

There is more information in the Win32/Sality description.

Also detected as: Infected: Virus:Win32/Sality.gen!enc(Microsoft)
Alert level: severe
Updated on Apr 11, 2011
Virus:Win32/Sality.gen!Q is a generic detection for a virus that spreads by infecting Windows executable files and by copying itself to removable and remote drives. It also terminates various security products, prevents certain Windows utilities from executing and attempts to download additional files from a predefined remote Web server.
Alert level: severe
Updated on May 26, 2010
Virus:Win32/Sality.gen!P is a generic detection for a family of polymorphic file infectors that target Windows executable files with SCR or EXE extensions. Files detected as Virus:Win32/Sality.gen!P may execute a damaging payload that deletes files with certain extensions and terminates security-related processes and services.
 
For more information, refer to the Virus:Win32/Sality family description elsewhere in the encyclopedia.
Alert level: severe
Updated on May 26, 2010
Virus:Win32/Sality.gen is a generic detection for members of the Win32/Sality virus family.
Alert level: severe
Updated on Apr 11, 2011
Virus:Win32/Sality.gen!AT is a detection for a virus that spreads by infecting Windows executable files and by copying itself to removable and remote drives. It also terminates various security products, prevents certain Windows utilities from executing and attempts to download additional files from a predefined remote Web server.
Alert level: severe
Updated on Aug 10, 2009
Alert level: severe
Updated on Oct 07, 2008
Alert level: severe
Updated on Nov 06, 2014
Windows Defender Antivirus detects and removes this threat.
 
This threat can install Virus:Win32/Sality.AU onto your PC, usually through networks or removable drives.
 
It can be installed by Exploit:Win32/CplLnk.A, which automatically runs the virus when you visit a malicious or hacked webpage.
 
Alert level: severe
Updated on Oct 10, 2013
Windows Defender Antivirus detects and removes this threat.
 
This file infector targets files with extensions .SCR or .EXE. This virus can run a damaging payload that deletes files with certain extensions or beginning with specific strings.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Sality.AT is a detection for files that are utilized by Virus:Win32/Sality.AT when spreading. Virus:Win32/Sality.AT is a virus that spreads by infecting Windows executable files and by copying itself to removable and remote drives. It also terminates various security products, prevents certain Windows utilities from executing and attempts to download additional files from a predefined remote Web server.
Alert level: severe
Updated on Apr 11, 2011
Virus:Win32/Sality.S is a file infector that targets files with extensions .SCR or .EXE. This virus may execute a damaging payload that deletes files with certain extensions and terminates security-related processes and services.
Alert level: severe
Updated on Mar 21, 2016

Windows Defender detects and removes this threat.

This virus stops some security software and prevents some Windows utilities from running. It also tries to download other files, including other malware, from a remote server.

It spreads by infecting Windows files and copying itself to removable and remote drives.

Find out ways that malware can get on your PC.

Alert level: severe
Updated on Apr 11, 2011
Trojan:WinNT/Sality is a driver used by the Win32/Sality family to disable any hooks into the system service descriptor table (SSDT).
Alert level: severe
Updated on Apr 11, 2011
Spammer:Win32/Sality.A is a detection for malware that searches a user's Outlook address book and Internet Explorer cached files for e-mail addresses to send spammed messages to. It then sends out spammed messages based on information it retrieves from a remote server.
Alert level: severe
Updated on Apr 11, 2011
Virus:Win32/Sality.AH is a polymorphic file infector that targets Windows executable with the .SCR or .EXE extension. Files detected as Virus:Win32/Sality.AH may execute a damaging payload that deletes files with certain extension and terminates security related processes.
Alert level: severe
Updated on Apr 11, 2011
Virus:Win32/Sality.R is a file infector that targets files with extensions .SCR or .EXE. This virus may execute a damaging payload that deletes files beginning with specific strings, or files that have certain file extensions.
Alert level: severe
Updated on Apr 11, 2011
Virus:Win32/Sality.T is a file infector that targets files with extensions .SCR or .EXE. This virus may execute a damaging payload that deletes files with certain extensions and terminates security-related processes and services.
Alert level: severe