avira detection W32/Sality.s!!!! a question ??

Discussion in 'other anti-virus software' started by Jin K, Aug 25, 2008.

Thread Status:
Not open for further replies.
  1. Jin K

    Jin K Registered Member

    Joined:
    Apr 9, 2008
    Posts:
    105
    hi everyone

    i want to ask a question about W32/Sality.s (avira) detection

    dose anyone know if this virus detected by Kav and if its what is the name of the detection o_O

    beacuse one of my friend has find one of his file infected with this

    and have scaned the file and only detected by 6 antivirus ، for me i think its a falls postitive but i just want to make sure
     
  2. Fajo

    Fajo Registered Member

    Joined:
    Jun 13, 2008
    Posts:
    1,812
    when avira detects it.. you can click more info. then scroll down to Full Details it shows you what other virus scanners go by for names for the same thing.. if you think its a false positive submit it to them so they can take a look and whitelist it if needed or confirm its infected.
     
  3. Jin K

    Jin K Registered Member

    Joined:
    Apr 9, 2008
    Posts:
    105
    thanks fago

    but there is no info on avira website
     
  4. Fajo

    Fajo Registered Member

    Joined:
    Jun 13, 2008
    Posts:
    1,812
    again if you think its a false positive submit it and find out. other then that no one can tell if it is or is not.. unless you feel like running it.
     
  5. Jin K

    Jin K Registered Member

    Joined:
    Apr 9, 2008
    Posts:
    105
    i will submit it

    but i want a detections name from ather anti-viruses if anyone knows o_O
     
  6. Fajo

    Fajo Registered Member

    Joined:
    Jun 13, 2008
    Posts:
    1,812
    Win32/Sality.F 27 Mar 2006Win32.Sality.F (EZ Antivirus), Win32/Sality.C!DLL!Trojan (InoculateIT) Win32/Sality.J 08 Jan 2008Win32.Sality.J (EZ Antivirus), Win32/Sality.J!DLL!Trojan (InoculateIT), W32/Sality.K (F-Secure), W32/Sality.n (McAfee), W32/Sality.n.dll (McAfee), W32/Virus.Win32.Sality.k (Kaspersky), W32/Virus.Win32.Sality.l (Kaspersky), W32.HLLP.Sality.O (Symantec), W32.HLLP.Sality (Symantec), W32/AdWare.Win32.BrilliantDigital.1100 (Kaspersky), W32/Sality!ITW#5 (WildList)

    Search result from Google and from Avira did wonders to find the information

    Edit.
    Also scene kaspersky don't seem to have .s it could be a variant that they don't have on file yet means they seem to use the same ones avira does for this detection on this virus.

    Here is the name of the Virus it self..
    Virus Name--->W32/Sality!ITW#6
    Avira's Alias for it-->W32/Sality.s
     
    Last edited by a moderator: Aug 25, 2008
  7. emperordarius

    emperordarius Registered Member

    Joined:
    Apr 27, 2008
    Posts:
    1,218
    Location:
    Who cares
    Not any google info...only Symantec's detection of the .s variant, which is the .p variant of Avira..
     
  8. Fajo

    Fajo Registered Member

    Joined:
    Jun 13, 2008
    Posts:
    1,812
    try this in Google.. W32/Sality.s kaspersky

    there is a crap load of information on it. also re read the edit above. it has the virus name and variant Alias info for Avira
     
  9. emperordarius

    emperordarius Registered Member

    Joined:
    Apr 27, 2008
    Posts:
    1,218
    Location:
    Who cares
    Yeah that was what I searched but I see no info about Avira's S variant, only about symantec's s variant..
    Anyway, from what I found:

    W32/Sality!ITW#6 W32/Sality.s Jun 2007 Fn Mt

    Seems a pretty old one.
     
  10. Creer

    Creer Registered Member

    Joined:
    Jun 29, 2008
    Posts:
    1,345
    Did you submit this file on www.virustotal.com?
     
  11. Jin K

    Jin K Registered Member

    Joined:
    Apr 9, 2008
    Posts:
    105
    yes and its only detected by 7 AV
     
  12. Leo2005

    Leo2005 Registered Member

    Joined:
    May 31, 2007
    Posts:
    179
    Location:
    Braunschweig (Germany)
    well it is a polymorphic virus. so it could be a correct detection.
    would be intresting which avs are detecting it on virustotal.

    but you can send the file to heuristik2(at)avira.com (please send password proctected with password in mail).
    so they will check the file.
     
Loading...
Thread Status:
Not open for further replies.