You're in: Panda Security > Home Users > security-info > about-malware > encyclopedia > overview
Active Scan. Scan your PC free
Download Cloud Antivirus Gratis

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0


Threat LevelLow threatDamageHighDistributionNot widespread
Common name:Sality.AO
Technical name:W32/Sality.AO
Threat level:Medium

It infects executable files (with an EXE and SCR extension) and files with an ASP, HTM and PHP extension, in order to download more malware to the affected computer. It reaches the computer by distributing the previously infected files.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95/CE

First detected on:Feb. 5, 2009
Detection updated on:March 9, 2010
Yes, using TruPrevent Technologies

Brief Description 


Sality.AO is a virus which infects the files with an EXE and SCR extension it finds in the affected computer.

Additionally, it infects files with an ASP, HTM and PHP extension by using a script that allows it to download more malware to the affected computer.

Sality.AOinfects executable files with an EXE and SCR extension, and files with an ASP, HTM and PHP extension, which are then distributed through any of the usual means: floppy disks, email messages with attachments, Internet download, files transferred via FTP, IRC channels, P2P file sharing networks, etc.

Visible Symptoms 


Sality.AO is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.


Technical Support

Panda Quick Start

Panda Quick Start

Let our experts install, activate, configure and customize your Panda's antivirus solution.
[+] info

Panda Remote Virus & Spyware Removal

Servicio de Asistencia de Desinfección

Let our experts access remotely to your PC, scan it and remove all viruses and spyware detected.
[+] info