Sality virus is a malicious file infecter that will inject its malicious code into many executable files on an infected computer. This virus also comes with a malware that infects and overwrites the autorun.inf file for auto-play.
Once your computer is infected with Sality, it will be able to connect to remote server and download more components of it or other malwares, it can also run executable files in hidden mode. Sality virus will use a file with the name %variable% to copy itself to removable media like USB / Pen drives. this file may have extension of .exe , .pif or .cmd. Sality malware will remove registry entries from infected computer to disable safe mood boot. it will also add registry entries to disable your task manager and disable registry editing tools, it will also block security center options.Learn how to enable task manager and registry editor
In the image below, you can see options disabled by Sality and it is detected as Trojan.Agent/Gen-Sality.
Sality virus will block certain antivirus websites on your machine. It will also disable many anti-malware and anti-virus softwares by blocking their processes from running on the computer. It also modifies registry to auto hide files and folders, so whenever you click show hidden files and folders, it will automatically hide the files after a few seconds. The new variant of w32.Sality.X is too annoying because it displays bunch of unwanted popup windows showing porn ads. this virus also makes your computer run really slow.
Lets take a look how Super anti-spyware detects and remove Sality malware and Trojan.Packed/gen.Lord.PE. I myself removed this virus using super antispyware.
This malware has several variants,a few are:
Win32.Sality
Sality.at
Sality.AE
Sality.M
Win32.Sality!IK
w32/Sality.NAU
W32/Sality.gen.z
W32 Sality virus removal Tool
To remove this virus Automatically, We suggest following tools:
Super Anti-Spyware (Download)
Malware Bytes Anti-Malware (Download)
