1. Symantec/
  2. Security Response/
  3. W32.Sality.S


Risk Level 1: Very Low

June 29, 2006
November 2, 2012 12:29:32 PM
Also Known As:
W32/Sality-V [Sophos]
Systems Affected:
W32.Sality.S is a virus that spreads by infecting executable files.

When the threat is first installed, it drops the following file:

The threat injects this .dll file into all running processes.

The threat then resides in memory and infects all portable executable files it finds.
Writeup By: Masaki Suenaga
Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube