Threat Search: 

ThreatExpert's Statistics for Virus.Win32.Sality [Ikarus]:

Virus.Win32.Sality [Ikarus] is also known as:
Threat AliasNumber of Incidents
Email-Worm.Warezov!sd5 [PC Tools]393,800
PE_SALITY.AL-O [Trend Micro]388,525
W32.HLLP.Sality [Symantec]375,906
Email-Worm.Win32.Warezov.et [Kaspersky Lab]317,685
W32/Sality.dll [McAfee]207,843
Virus.Win32.Sality.k [Kaspersky Lab]102,503
W32/Sality.n.dll [McAfee]100,796
Worm.Sality [PC Tools]89,869
W32/Sality-I [Sophos]81,258
Worm:Win32/Sality.G.dll [Microsoft]76,860
Virus.Win32.Sality.s [Kaspersky Lab]69,624
Worm:Win32/Sality.T.dll [Microsoft]61,850
Win-Trojan/Sality.23552.B [AhnLab]52,216
W32/Sality-AD [Sophos]36,071
Virus.Win32.Sality.q [Kaspersky Lab]35,860
Trojan-Proxy.Ranky.GI [PC Tools]35,728
PE_SALITY.AS-O [Trend Micro]35,112
BKDR_SALITY.AE [Trend Micro]23,426
Win-Trojan/Sality.40960 [AhnLab]7,685
W32/Sality-AM [Sophos]4,526
PE_SALITY.AO-O [Trend Micro]3,000
Virus.Win32.Sality.s [Ikarus]2,949
Trojan.Win32.KillAV.nh [Kaspersky Lab]2,694
W32.Sality.AB [Symantec]2,478
Worm:Win32/Sality.AH!dll [Microsoft]2,477
Win32.Sality.AJ [PC Tools]2,256
Virus:Win32/Sality.AM [Microsoft]2,220
W32.Sality.AE [Symantec]2,114
Virus.Win32.Sality.K [Ikarus]1,968
Virus.Win32.Sality.aa [Kaspersky Lab]1,612
W32/Sality.gen [McAfee]1,579
Win-Trojan/Killav.81920.D [AhnLab]1,447
Win32.Sality.M [PC Tools]1,386
Win32/Kashu.B [AhnLab]1,146
BKDR_SALITY.A [Trend Micro]1,075
Trojan.AVKill!ct [PC Tools]960
Hacktool [Symantec]915
Rootkit.DR.CryptPack.A [PC Tools]903
Trojan.Win32.KillAV.ne [Kaspersky Lab]693
Troj/RkSal-A [Sophos]637
Worm:WinNT/Sality.AH!sys [Microsoft]623
Virus.Win32.Sality.q [Ikarus]622
NTRootKit-AB [McAfee]543
Win32.Sality.AM.Gen [PC Tools]491
Virus.Win32.Sality.z [Kaspersky Lab]471
Trojan.Win32.KillAV [Ikarus]371
ProcKill-EC [McAfee]364
W32/Kookoo-A [Sophos]360
PE_SALITY.EK [Trend Micro]357
Trojan:Win32/Sality.M.dll [Microsoft]338
TROJ_KILLAV.GN [Trend Micro]329
Trojan.CryptPack.A [PC Tools]320
PE_SALITY.JER [Trend Micro]314
W32/Sality.t.dll [McAfee]312
Virus.Win32.Sality.n [Kaspersky Lab]305
Win-Trojan/AVKill.5077 [AhnLab]301
PE_SALITY.EN [Trend Micro]288
Mal/Sality-B [Sophos]259
TROJ_SALITY.AV [Trend Micro]207
BKDR_SALITY.AH [Trend Micro]200
W32/Sality.ao [McAfee]200
Win32.Sality.AA [PC Tools]190
W32/Sality.ag [McAfee]187
PE_SALITY.BU [Trend Micro]184
PE_SALITY.EN-1 [Trend Micro]166
Win32.Sality.AI [PC Tools]133
Generic.dv [McAfee]129
Trojan.Sality.Z [PC Tools]129
Virus.Win32.Virut.ce [Kaspersky Lab]129
W32.Virut.CF [Symantec]129
PE_SALITY.DAM [Trend Micro]126
Trojan.DR.Sality.Z [PC Tools]126
Win32/Virut.F [AhnLab]121
W32/Sality-U [Sophos]116
Virus:Win32/Virut.BM [Microsoft]115
Virus:Win32/Sality.L.dll [Microsoft]113
W32/Vetor-A [Sophos]106
Spam-Mailbot [McAfee]98
W32.Virut.U [Symantec]98
Win32.Virut.Gen.5 [PC Tools]95
W32.Virut.W [Symantec]89
W32/Virut.gen [McAfee]89
Virus.Win32.Virut.q [Kaspersky Lab]85
W32/Scribble-B [Sophos]83
Virus.Win32.Sality.y [Kaspersky Lab]81
Trojan.Win32.KillAV.ne [Ikarus]77
Win32.Virut.Gen.4 [PC Tools]73
Hacktool.Rootkit [Symantec]72
W32.SillyFDC [Symantec]72
W32/Sality.ah [McAfee]72
PE_SALITY.EN-O [Trend Micro]65
Generic Rootkit.d [McAfee]64
Hacktool.Rootkit!sd5 [PC Tools]64
PE_SALITY.BU-O [Trend Micro]57
TROJ_RENOS.BX [Trend Micro]57
VirTool:Win32/Rootkit.C [Microsoft]56
Win32.Sality.V [PC Tools]56
Win-Trojan/Sality.5477 [AhnLab]56
PE_SALITY.M [Trend Micro]55
Trojan.Qhost!sd5 [PC Tools]54

Virus.Win32.Sality [Ikarus] has the following possible countries of origin:
OriginNumber of Incidents
Taiwan152
China90
Russian Federation88
United Kingdom52
Germany39
Japan38
Brazil28
Republic of Korea28
Spain27
Turkey24
France20
Israel16
Poland16
Canada15
Saudi Arabia15
Australia9
Belgium7
Italy4
Czech Republic3
Netherlands3
New Zealand3
Sweden3
Indonesia2
Portugal2
Slovakia2
Croatia1
Hungary1
Norway1
Singapore1
South Africa1
Switzerland1
Thailand1
Ukraine1

Virus.Win32.Sality [Ikarus] is known to be created as:
%AllUsersProfile%\desktop.exe
%AllUsersProfile%\favorites.exe
%AllUsersProfile%\smss.exe
%AppData%\foxitreader_setup.exe
%AppData%\microsoft\cd burning\coolworld.exe
%AppData%\microsoft\cd burning\khatra.exe
%AppData%\microsoft\hscg.exe
%AppData%\microsoft\svcchost.exe
%AppData%\printer.exe
%CommonAppData%\fearghus\lsass.exe
%CommonAppData%\microsoft\kbdriver\classified.exe
%CommonAppData%\microsoft\kbdriver\kbdsys.exe
%CommonAppData%\microsoft\usb2.0\usb-hi.exe
%CommonAppData%\zilch.infinisoft\dirlock.exe
%CommonDesktopDir%\classified.exe
%CommonDesktopDir%\classified\classified.exe
%CommonDesktopDir%\desktop.exe
%CommonDesktopDir%\documents.exe
%CommonDocuments%\classified.exe
%CommonDocuments%\classified\classified.exe
%CommonDocuments%\documents.exe
%CommonDocuments%\my pictures\sample pictures\sunset.exe
%CommonDocuments%\my pictures\sample pictures\winter.exe
%CommonFavorites%\favorites.exe
%CommonPrograms%\accessories\accessibility\accessibility.exe
%CommonPrograms%\accessories\accessories.exe
%CommonPrograms%\accessories\communications\communications.exe
%CommonPrograms%\accessories\entertainment\entertainment.exe
%CommonPrograms%\programs.exe
%CommonPrograms%\startup\autorun.exe
%CommonPrograms%\startup\classified.exe
%CommonPrograms%\startup\folderwiz.com
%CommonPrograms%\startup\kbdrv16.com
%CommonPrograms%\startup\startup.exe
%CommonPrograms%\startup\svchots.exe
%CommonPrograms%\startup\systemil2.exe
%DesktopDir%\desktop.exe
%DesktopDir%\games.exe
%DesktopDir%\mp3.exe
%DesktopDir%\videos.exe
%Favorites%\favorites.exe
%Favorites%\links\links.exe
%FontsDir%\fonts.exe
%FontsDir%\tskmgr.exe
%MyDocuments%\classified.exe
%MyDocuments%\games.exe
%MyDocuments%\hiddenfolder.exe
%MyDocuments%\mp3.exe
%MyDocuments%\my pictures\mskernel.exe
%MyDocuments%\videos.exe
%Profiles%\default user\templates\winword.scr
%Profiles%\default user\templates\winword2.scr
%ProgramFiles%\adobe.exe
%ProgramFiles%\bifrost\prosex.exe
%ProgramFiles%\bifrost\server.exe
%ProgramFiles%\classified.exe
%ProgramFiles%\common files\designer\designer.exe
%ProgramFiles%\common files\mssoap\binaries\binaries.exe
%ProgramFiles%\common files\mssoap\mssoap.exe
%ProgramFiles%\common files\odbc\odbc.exe
%ProgramFiles%\common files\services\services.exe
%ProgramFiles%\common files\speechengines\microsoft\tts\tts.exe
%ProgramFiles%\common files\speechengines\speechengines.exe
%ProgramFiles%\common files\system\ado\ado.exe
%ProgramFiles%\common files\system\msadc\msadc.exe
%ProgramFiles%\common files\system\system.exe
%ProgramFiles%\folder collection\games.exe
%ProgramFiles%\folder collection\mp3.exe
%ProgramFiles%\folder collection\videos.exe
%ProgramFiles%\internet explorer\keygen.exe
%ProgramFiles%\messenger.exe
%ProgramFiles%\microsoft office\office11\services.exe
%ProgramFiles%\msn.exe
%ProgramFiles%\netmeeting.exe
%ProgramFiles%\outlook express\keygen.exe
%ProgramFiles%\phil.constitution.scr
%ProgramFiles%\services.exe
%ProgramFiles%\utorrent\utorrent.exe
%ProgramFiles%\vmware.exe
%ProgramFiles%\warcraft iii\games.exe
%ProgramFiles%\warcraft iii\mp3.exe
%ProgramFiles%\warcraft iii\videos.exe
%ProgramFiles%\winpcap.exe
%ProgramFiles%\worldkey\mallpoint\installer.exe
%ProgramFiles%\wowrd\wowrrdd.exe
%ProgramFiles%\xerox.exe
%Programs%\accessories\accessibility\accessibility.exe
%Programs%\accessories\accessories.exe
%Programs%\accessories\entertainment\entertainment.exe
%Programs%\programs.exe
%Programs%\startup\findfast.exe
%Programs%\startup\lssas.exe
%Programs%\startup\startup.exe
%Programs%\startup\svchots.exe
%System%\090520-7-3.exe
%System%\1025.exe
%System%\1028.exe
%System%\1031.exe
%System%\1033.exe
%System%\1037.exe
Notes:
  • %AllUsersProfile% is a variable that specifies the all users' profile folder. By default, this is C:\Documents and Settings\All Users (Windows NT/2000/XP).
  • %AppData% is a variable that refers to the file system directory that serves as a common repository for application-specific data. A typical path is C:\Documents and Settings\[UserName]\Application Data.
  • %CommonAppData% is a variable that refers to the file system directory containing application data for all users. A typical path is C:\Documents and Settings\All Users\Application Data.
  • %CommonDesktopDir% is a variable that refers to the file system directory that contains files and folders that appear on the desktop for all users. A typical path is C:\Documents and Settings\All Users\Desktop (Windows NT/2000/XP).
  • %CommonDocuments% is a variable that refers to the file system directory that contains documents that are common to all users. A typical paths is C:\Documents and Settings\All Users\Documents.
  • %CommonFavorites% is a variable that refers to the file system directory that serves as a common repository for all users' favorite items. A typical path is C:\Documents and Settings\All Users\Favorites (Windows NT/2000/XP).
  • %CommonPrograms% is a variable that refers to the file system directory that contains the directories for the common program groups that appear on the Start menu for all users. A typical path is C:\Documents and Settings\All Users\Start Menu\Programs (Windows NT/2000/XP).
  • %DesktopDir% is a variable that refers to the file system directory used to physically store file objects on the desktop. A typical path is C:\Documents and Settings\[UserName]\Desktop.
  • %Favorites% is a variable that refers to the file system directory that serves as a common repository for the user's favorite items. A typical path is C:\Documents and Settings\[UserName]\Favorites.
  • %FontsDir% is a variable that refers to a virtual folder containing fonts. A typical path is C:\Windows\Fonts.
  • %MyDocuments% is a variable that refers to the file system directory used to physically store a user's common repository of documents. A typical path is C:\Documents and Settings\[UserName]\My Documents.
  • %Profiles% is a variable that refers to the file system directory containing user profile folders. A typical path is C:\Documents and Settings.
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %Programs% is a variable that refers to the file system directory that contains the user's program groups. A typical path is C:\Documents and Settings\[UserName]\Start Menu\Programs.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).