- June 29, 2006
- November 2, 2012 12:29:32 PM
Also Known As:
- W32/Sality-V [Sophos]
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W32.Sality.S is a virus that spreads by infecting executable files.
When the threat is first installed, it drops the following file:
The threat injects this .dll file into all running processes.
The threat then resides in memory and infects all portable executable files it finds.
Writeup By: Masaki Suenaga