Win32.Sality.AA
Win32.Sality.AA is a Windows platform worm that spreads by copying itself to removable drives and shared folders. Win32.Sality.AA is an appending file infector that can hide its presence in a compromised computer. On entering a system, Win32.Sality.AA will infect files with .exe extension, download additional malware and disable certain security applications running on the system. Win32.Sality.AA is a computer threat that should be removed from an infected machine as soon as possible.
Table of Contents
Aliases
15 security vendors flagged this file as malicious.
| Anti-Virus Software | Detection |
|---|---|
| TrendMicro | BKDR_SALITY.AJ |
| Symantec | W32.HLLP.Sality |
| Sophos | W32/Sality-W |
| Panda | W32/Sality.P |
| Microsoft | Virus:Win32/Sality.O.dll |
| McAfee | W32/Sality.dll |
| Fortinet | W32/Sality |
| F-Secure | Virus.Win32.Sality.k |
| eTrust-Vet | Win32/Sality.N |
| eSafe | Win32.Sality.gen |
| DrWeb | Win32.HLLP.Sector |
| ClamAV | W32.Sality-2 |
| BitDefender | Win32.Sality.G |
| AVG | Win32/Sality |
| Avast | Win32:Sality-AI |
SpyHunter Detects & Remove Win32.Sality.AA
File System Details
Win32.Sality.AA may create the following file(s):
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | wcmlogon.dll | 3c2a09832c83498e3bae458c84175377 | 0 |
