Published Apr 13, 2010 | Updated Sep 15, 2017


Severe |Detected with Windows Defender Antivirus

Aliases: Win32/Sality.F (AhnLab) W32/Sality.k (Command) Trojan.Win32.Scar.bxqc (Kaspersky) W32/Sality.n (Norman) Win32.Sality.L (VirusBuster) Virus found Win32/Sality (AVG) W32/Sality.l (Avira) Win32/Sality.J (CA) Trojan.MulDrop.55658 (Dr.Web) Win32/Sality.NAE (ESET) Virus.Win32.Flot (Ikarus) Trojan.Win32.Scar.bxqc (Kaspersky) Infected: Virus:Win32/Sality.gen!enc (Microsoft) W32/Sality.O (Panda) Win32.Sality (Rising AV) W32/Sality-AI (Sophos) Win32.Sality.AE (Sunbelt Software) W32.HLLP.Sality.O (Symantec) PE_SALITY.AE (Trend Micro)


Virus:Win32/Sality.G is the detection for files that have been infected by Virus:Win32/Sality.G.dll.
Virus:Win32/Sality.G and Virus:Win32/Sality.G.dll are variants if the Virus:Win32/Sality, a family of polymorphic file infectors that target Windows executable files with extensions .SCR or .EXE. They may execute a damaging payload that deletes files with certain extensions and terminates security-related processes and services. They may also download and execute arbitrary files from a remote server.
For more information, please see the detailed Virus:Win32/Sality family descriptionelsewhere in the encyclopedia.
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as Microsoft Security Essentials, or the Microsoft Safety Scanner. For more information about using antivirus software, see
Follow us