Home / malwarePDF  


First posted on 31 March 2020.
Source: Microsoft

Aliases :

There are no other names known for Virus:HTML/Sapaq.A.

Explanation :

Virus:HTML/Sapaq.A is the detection for files modified by Virus:Win32/Sapaq.A, a prepending virus that infects executable files. Virus:Win32/Sapaq.A appends an IFrame to HTML files located in a system infected with Virus:Win32/Sapaq.A. The HTML file is modified to contain code that connects to the remote server '52cps.com'. As of this writing, the server is no longer active.  Analysis by Chun Feng

Last update 31 March 2020