Remove Sality. Description and removal instructions

Title: Sality
Type: Viruses	Severity scale: (70 / 100)

Sality is a complex virus with keylogger and backdoor functionality. Once executed, the parasite installs itself to the system, checks the current time and runs a payload if hours are equal to minutes or if date is a predetermined one.

Sality infects local executable files, deletes files associated with installed security-related software including various antiviruses and firewalls. Then it runs a keylogging module, which collects system and network information, records user login names and passwords, steals sensitive information stored in specific files and finally sends all this data to a predefined e-mail address.

Sality can also open a back door providing the remote attacker with unauthorized access to the compromised computer. The intruder can control the system and steal other user sensitive information.

FORUM:
Discuss Sality in
spyware removal forum

Related files: oledsp32.dll, sysdll.dll, syslib32.dll

Sality properties:
• Allows remote user connection
• Sends out logs by FTP or email
• Logs keystrokes
• Hides from the user
• Stays resident in background

Automatic Sality removal:

remover for Sality

Sality manual removal:

Delete files:
oledsp32.dll, sysdll.dll, syslib32.dll

HELP:
how to remove harmful files

Misc:
Sality files can be found in one of the following folders C:\Windows\System, C:\Windows\System32, C:\Winnt\System32 or in one of these directories: C:\Windows\Temp, C:\Winnt\Temp.

Other programs to remove Sality:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 18/01/06
Information updated: 30/01/08

Additional resources related to Sality:

Attention: If you know or you have a website or page about Sality removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Sality parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.