Threat Database Viruses Win32.Sanity.N

Win32.Sanity.N

By Sumo3000 in Viruses

Threat Scorecard

Threat Level: 20 % (Normal)
Infected Computers: 440
First Seen: May 7, 2013
Last Seen: February 15, 2023
OS(es) Affected: Windows

Win32.Sanity.N is a virus that spreads as a bogus Flash player update for DropBox via compromised websites. The bogus Flash update tricks target computer users into downloading and installing Win32.Sanity.N on attacked computer. The fraudulent alert at the top of one of the page alternates between English and Turkish. Win32.Sanity.N adds the malevolent executable files that are, in actuality, hosted in a DropBox account and have not been taken down since they were some time ago. The files disable all Windows features: Firewall, Safe Boot, AV, UAC, and other. Win32.Sanity.N then distributes variations of the Sality virus.

File System Details

Win32.Sanity.N may create the following file(s):
# File Name Detections
1. Videonuizle.exe
2. FlashPlayer.sfx.exe

URLs

Win32.Sanity.N may call the following URLs:

syncrenewedintenselythefile.vip

Trending

Most Viewed

Loading...