x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0

Sality.AN

 
Threat LevelLow threatDamageHighDistributionNot widespread
Common name:Sality.AN
Technical name:W32/Sality.AN
Threat level:Medium
Type:Virus
Effects:  

It infects executable files (with an EXE, PIF and SCR) and downloads variants of the Trojan family called Sinowal, designed to steal user's banking details. It spreads by distributing the previously infected files and making copies of itself in the system and removable drives.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

First detected on:Nov. 30, 2008
Detection updated on:Dec. 18, 2008
StatisticsNo
Proactive protection:
Yes, using TruPrevent Technologies

Brief Description 

    

Sality.AN is a Trojan which infects the files with an EXE, PIF and SCR extension it finds in the affected computer.

Additionally, it downloads several variants of the Sinowal family, which are Trojans designed to steal banking data.

On the other hand, it reduces considerably the security level of the computer, as it deletes Windows Registry entries belonging to several antivirus programs. This would leave the computer vulnerable against the attack of other threats.

Sality.AN uses the following means to spread:

  • It infects files with an EXE, PIF and SCR extension, which are then distributed through any of the usual means: floppy disks, email messages with attachments, Internet download, files transferred via FTP, IRC channels, P2P file sharing networks, etc.
  • It makes copies of itself in all the system and removable drives.

Visible Symptoms 

    

Sality.AN is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.

>