Win32/Sality.NAR
Win32/Sality.NAR also called as Sality.NAR is a polymorphic win32 worm that can download and execute malware entries from a outlying hacker servers. Win32/Sality.NAR is usually installed via links in annoying e-mail attachments, pornographic related websites ads or via corrupt videocodec downloads. In addition to installing other infections, worm Sality.NAR may also download corrupt notepad.exe, winmine.exe, dnary.mdb files and updated itself. The Win32/Sality.NAR is a hazardous worm infection that may cause critical damage to your pc files!
Clones: Virus.Win32.Sality.aa (Kaspersky), W32/Sality.ah (McAfee), Virus:Win32/Sality.AM (Microsoft), W32.HLLP.Sality (Symantec), Virus.Win32.Sality.M, Virus.Win32.Sality.S, Virus.Win32.Sality.NAO, Virus.Win32.Sality.X, Virus.Win32.Sality.q, Virus.Win32.Sality.R, Virus.Win32.Sality.AE
Possible Win32/Sality.NAR worm signs:
- Reduced Internet and computer performance, slower Windows startup / shutdown
- Unusual Web browser's home page and hijacked search engine results
- Loss of system files, registry keys and dlls files produce "Blue Screen Of Death"
- Abnormal Sality.NAR processes running in Windows task list, can't block weird bleeping noise
- Sality.NAR patch up and re-install its files after removal, exceedingly complicated to remove manually
- Pop up blocker program incapable to hinder popups, overwhelmed desktop with porn pop ups (online and offline)
- Desktop background picture screen and screen saver hijacked by messages
Win32/Sality.NAR behaviors:
- Checks surfing activity and Windows system to generate matching pop up ads
- Sality.NAR infects Computer through security holes, downloads and installs numerous third-party files from remote servers
- Sality.NAR restricts active security programs, gathers and forwards confidential info (passwords, usernames etc.) to outlying servers
Run Free easy-to-use scanner tool to find out if you are affected. Get rid of Win32/Sality.NAR clones for good! |
|
