avira detection W32/Sality.s!!!! a question ??

hi everyone

i want to ask a question about W32/Sality.s (avira) detection

dose anyone know if this virus detected by Kav and if its what is the name of the detection

beacuse one of my friend has find one of his file infected with this

and have scaned the file and only detected by 6 antivirus ، for me i think its a falls postitive but i just want to make sure

 

when avira detects it.. you can click more info. then scroll down to Full Details it shows you what other virus scanners go by for names for the same thing.. if you think its a false positive submit it to them so they can take a look and whitelist it if needed or confirm its infected.

 

thanks fago

but there is no info on avira website

 

again if you think its a false positive submit it and find out. other then that no one can tell if it is or is not.. unless you feel like running it.

 

i will submit it

but i want a detections name from ather anti-viruses if anyone knows

 

Win32/Sality.F 27 Mar 2006Win32.Sality.F (EZ Antivirus), Win32/Sality.C!DLL!Trojan (InoculateIT) Win32/Sality.J 08 Jan 2008Win32.Sality.J (EZ Antivirus), Win32/Sality.J!DLL!Trojan (InoculateIT), W32/Sality.K (F-Secure), W32/Sality.n (McAfee), W32/Sality.n.dll (McAfee), W32/Virus.Win32.Sality.k (Kaspersky), W32/Virus.Win32.Sality.l (Kaspersky), W32.HLLP.Sality.O (Symantec), W32.HLLP.Sality (Symantec), W32/AdWare.Win32.BrilliantDigital.1100 (Kaspersky), W32/Sality!ITW#5 (WildList)

Search result from Google and from Avira did wonders to find the information

Edit.
Also scene kaspersky don't seem to have .s it could be a variant that they don't have on file yet means they seem to use the same ones avira does for this detection on this virus.

Here is the name of the Virus it self..
Virus Name--->W32/Sality!ITW#6
Avira's Alias for it-->W32/Sality.s

 

Not any google info...only Symantec's detection of the .s variant, which is the .p variant of Avira..

 

try this in Google.. W32/Sality.s kaspersky

there is a crap load of information on it. also re read the edit above. it has the virus name and variant Alias info for Avira

 

Yeah that was what I searched but I see no info about Avira's S variant, only about symantec's s variant..
Anyway, from what I found:

W32/Sality!ITW#6 W32/Sality.s Jun 2007 Fn Mt

Seems a pretty old one.

 

Did you submit this file on www.virustotal.com?

 

yes and its only detected by 7 AV

 

well it is a polymorphic virus. so it could be a correct detection.
would be intresting which avs are detecting it on virustotal.

but you can send the file to heuristik2(at)avira.com (please send password proctected with password in mail).
so they will check the file.