W32.Sality.Y2!inf Description

W32.Sality.Y2!inf is a virus that proliferates by affecting portable executable files on local, removable and remote shared drives. W32.Sality.Y2!inf also erases certain files from the compromised PC. While being activated, W32.Sality.Y2!inf distributes malevolent files. W32.Sality.Y2!inf also inserts the certain .dll file into all running processes. W32.Sality.Y2!inf may show a pop-up message on the targeted machine. W32.Sality.Y2!inf records keystrokes and then transfers the certain email to remote cybercriminals with an attachment that carries the stolen data. W32.Sality.Y2!inf may also create a peer-to-peer (P2P) botnet and get URLs of additional files for downloading. W32.Sality.Y2!inf then attempts to block anti-virus programs.

Type: Viruses

How Can You Detect W32.Sality.Y2!inf?

W32.Sality.Y2!inf Technical Report

As new W32.Sality.Y2!inf details are reported by our customers and findings from our Threat Research Center, we will update this section.

Fake message for W32.Sality.Y2!inf:

The following fake error message(s) appears for W32.Sality.Y2!inf:

Spam email message:

Title:
HLLP.KUKU v3.0a

Message:
<<<<>>>>
Copywrite (c) by Sector

W32.Sality.Y2!inf Removal Details

W32.Sality.Y2!inf has typically the following processes in memory:

• %System%\oledsp32.dll

W32.Sality.Y2!inf creates the following files in the system:

• %Windir%\System.ini

Important Article Disclaimer