BKDR_SALITY.AE

This backdoor program is usually dropped by PE_SALITY.AE.

Once registered, this backdoor program inserts its process in all running processes of an affected machine.

This is Trend Micro's detection for a .DLL file used by other malware programs in performing their malicious routines. One of the said routines include searching for an Internet connection by accessing a valid Microsoft Web site. If there is an Internet connection, this backdoor then attempts to download possibly malicious files from the Internet.

It opens a random port and awaits for commands, which it executes locally, from a remote malicious user.

Related Items