BKDR_SALITY.A

This is Trend Micro's detection for a DLL component used by other malware programs in performing their malicious routines.

Among the said routines are logging keystrokes and searching for an Internet connection, by accessing a valid Microsoft Web site, on the affected system. If an Internet connection is established, this backdoor connects to the Internet Relay Chat (IRC) server, rinet.msk.wenet.ru. It then listens and executes commands coming from a remote malicious user. This routine effectively compromises system security.

Related Items