Hi…i scan another pc (with win xp) in my LAN and didn’t found any viruses in drive c. But when i install avast in that pc, avast found that the computer is infected by sality? Why avast can’t identified sality from network?
What was the computer you ran the first scan on? (operating system, admin/non-admin, …)
Windows 7 with admin user and also using admin user in infected pc
A part of our Sality detections is based on complex heuristics which use current OS as an environment to judge samples. It might decide that mentioned sality samples aren’t dangerous for your Windows 7 system.
i see…so maybe this sality’s varians not in avast database?
but, why the infected file in removable storage (flash disk) from the infected pc can identified by avast when i insert it on the seven machine?
You can use Sality Killer.
Thank’s for your suggestion, but i’d already clean the sality. I just ask why avast can identified sality when it scan on a network…