TIP: Click on subject to list as thread! ANSI
echo: alt-comp-anti-virus
to: ALL
from: DAVID H. LIPMAN
date: 2014-11-03 06:49:00
subject: Re: Norton Detects W32.Sa

From: "Erehwon" 

> Has anyone else seen this problem?  I use Ad-Aware as on-demand scanner 
> and have Norton Security Suite ("free" version from Comcast) as real time 
> scanner.  After updating to Ad-Aware 11, Norton started detecting 
> "W32.Sality.W" in a temp file in the Ad-Aware program folder on every 
> scan. Each time it said it had removed the threat and requested reboot to 
> complete the removal process.  Next scan it finds it again.  Nothing found 
> by Malwarebytes, Spybot S&D, or Ad-Aware itself.  After 6 or 8 times I 
> finally uninstalled Ad-Aware and Norton hasn't found anything since.  I'm 
> assuming this was a false positive but haven't seen any reports of a 
> similar problem. I'll probably wait a week to be sure problem doesn't 
> return before trying to re-install Ad-Aware.


Sality is a file infecting virus.  If the PC was infected than NUMEROUS 
files would be flagged as infected.  This must be a F/P.

Note also that Malwarebytes is not an anti virus application so it is 
expected that it would not detect Win32/Sality.  At best it would detect a 
Win32/Sality dropper.  That is a file that isn't infected with Sality but 
will start a Sality infection.


-- 
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp 

--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)

SOURCE: echomail via QWK@docsplace.org

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.