Home / malware

PDF

Virus:Win32/Sality.AM

First posted on 04 February 2009.
Source: SecurityHome

Aliases :

Virus:Win32/Sality.AM is also known as Also Known As:Win32/Kashu.B (AhnLab), Win32.Sality.NX (BitDefender), Win32/Sality.W (CA), Win32.Sector.5 (Dr.Web), Win32/Sality.NAO (ESET), W32/Sality.AJ (Frisk (F-Prot)), Virus.Win32.Sality.y (Kaspersky), W32/Sality.AE (McAfee), W32/Smalltroj.DXSV (Norman), W32/Sality-AM (Sophos), W32.Sality.AE (Symantec), Win32.Sality.AK (VirusBuster).

Explanation :

Virus:Win32/Sality.AM is a variant of a family of polymorphic file infectors that target Windows executable files with extensions .SCR or .EXE. They may execute a damaging payload that deletes files with certain extensions and terminates security-related processes and services.


Symptoms
System ChangesThe following system changes may indicate the presence of Virus:Win32/Sality.AM:

Infected files may unexpectedly increase in size

Anti-virus and firewall applications may fail to function

Virus:Win32/Sality.AM is a variant of a family of polymorphic file infectors that target Windows executable files with extensions .SCR or .EXE. They may execute a damaging payload that deletes files with certain extensions and terminates security-related processes and services.
For more information, please see the detailed Virus:Win32/Sality family description elsewhere in our encyclopedia.

Last update 04 February 2009

 

TOP