0 How to analyze the sality virus

 

Virus "Salitiy" back in action ... a virus that originated
action in around 2003 is now re-emerged with a more action
"cool "....
The analysis assessing these viruses belong to the
category of "parasites" because it's the action like a parasitic plant that
Tumbuan harm the host.

Neng "Salitiy" trying to save a piece of his body (see
source code) to be attached (read injek) on the body file
host. Wal results of the original file size swelled to about
20KB. Good again Salitiy put source code on empty
segments on the file and change the entry carrying the original poit to Bagun
tubunya early so that the first run is the source code
false and sometimes create a master file becomes corrupt. In general, files
parent immediately shut down while running.

Its spread can be spelled "unique"because after infecting a
EXE file (PE), the newly infected file, which will
continue the action of the virus and so on akanmencari victims
other. At the time of the infected files on-kill, not the dead action
but taken over by his predecessor.

The most obvious action is to always turn off the super hidden in the Folder Options.

There are parts of the register are left, the new constrained, and
modified. The most meninjol can not enter Safe Mode.
For more thrill please read the file that I include.

Please advise if there are parts that are less perfect.

Thank you.