Win32.Sality.OG.Removal

Win32.Sality.OG.Removal - Sality antivirus tool

This is the antivirus software.win32.vality.OG which is the cause of locking task manager and regedit. It spreads to EXE files very quickly, so this will be a useful tool to help you when you encounter it.

Sality 'viral' strain with many variants is considered to be much more dangerous than the Conficker pandemic. They are known as Sality, Win32 / Sality, Sality.AA, Sality.AE, Sality.AH, Sality.AM, Sality.AR, Sality.OG.

Sality is a very complex and polymorphic file transmission virus, including both backdoor and keylock functions. Strongly contagious and highly dangerous, Sality has been classified as the most dangerous virus by security companies in recent months. Once a computer is infected with Sality, it is very difficult to remove, to avoid the situation that after the virus is finished, the programs will be damaged, CMC InfoSec has launched a tool with the mechanism to clean infected files, after scanning the programs. Can still function normally.

Dangerous level

Sality infects almost all operating systems through the Internet and LAN. Sality spreads by infecting '.exe' files on all drive partitions including explorer.exe, uninstall.exe . Some of the '.exe' application files when infected remain can run, but running will kill the running processes of other applications or display error messages. They infect '.com', '.src' and '.dll' files on the Windows directory through the autorun component that spreads from removable drives. Sality uses Trojan technology to download malware. After the infection, they immediately attacked and disabled alerts from the Windows security center, locked the Task manager, the Registry editor, and lost the ability to display hidden files. They bypass the firewall system, preventing the operation of Antivirus software, if it works, it cannot detect Sality virus or detect it but cannot kill it. Sality blocks access to secure websites and does not allow users to boot from Safe Mode. When the USB is plugged into the computer, it will automatically generate autorun.inf file randomly.
Sality is like a keylogger, stealing usernames and passwords and passing this information on to a third party. Sality, like Backdoor, opens the back door for hackers to remotely hijack control of infected computers and perform illegal activities.
Sality is really a dangerous threat, they regularly produce new variants periodically. In addition, Sality authors tend to continue to create even more complex malware.

Processing solution

Scan your entire computer with the latest version of Antivirus, or the latest Sality removal tool. Once a Sality-infected file is found to allow the antivirus program to clean the file, when the malware is detected, delete it all. Preventing infection via USB by disabling Autorun mode .