Sality.AM is a Virus. A Virus is a software program capable of reproducing itself spreading to other programs on the same computer or on other computers via the network. Sality.AM is compressed using the executable packer and its file size is 245,760 bytes. It also changes Windows registry: - Creates key "HKLM\Software\Hewlett-Packard\HPDJ Printing System Config".
Sality.AM makes the following additional changes to the infected computer: - Creates WindowsHook monitoring (null) activity.
It creates the following mutex to ensure only one instance is running: Op1mutx9. HPDJ TaskAgent Utility. |
