PE_SALITY.AI

This file infector infects executable (.EXE) files located in the Windows folder and its subfolders. It also infects .EXE files located in the root folder (usually C:\) and its subfolders. The said action may cause essential system applications to malfunction.

Furthermore, it drops a file detected by Trend Micro as BKDR_SALITY.AJ, in the Windows system folder. The mentioned dropped file is injected to all running processes. Allowing the said backdoor to run in the background without the affected user's knowledge.

Related Items