From: "Erehwon"
> Has anyone else seen this problem? I use Ad-Aware as on-demand scanner
> and have Norton Security Suite ("free" version from Comcast) as real time
> scanner. After updating to Ad-Aware 11, Norton started detecting
> "W32.Sality.W" in a temp file in the Ad-Aware program folder on every
> scan. Each time it said it had removed the threat and requested reboot to
> complete the removal process. Next scan it finds it again. Nothing found
> by Malwarebytes, Spybot S&D, or Ad-Aware itself. After 6 or 8 times I
> finally uninstalled Ad-Aware and Norton hasn't found anything since. I'm
> assuming this was a false positive but haven't seen any reports of a
> similar problem. I'll probably wait a week to be sure problem doesn't
> return before trying to re-install Ad-Aware.
Sality is a file infecting virus. If the PC was infected than NUMEROUS
files would be flagged as infected. This must be a F/P.
Note also that Malwarebytes is not an anti virus application so it is
expected that it would not detect Win32/Sality. At best it would detect a
Win32/Sality dropper. That is a file that isn't infected with Sality but
will start a Sality infection.
--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp
--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)
|