Sophos

W32/Small-EKH

Aliases
  • Worm.Win32.Small.l
  • TROJ_SMALL.EAK
  • Application-WinDrives
  • W32/Worm.GTS
Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Network shares
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Protection available since 19 September 2007 15:14:11 (GMT)
Last updated 17 July 2008 01:05:37 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

W32/Small-EKH is a worm for the Windows platform.

W32/Small-DHR may spread to locally accessible drives

When first run W32/Small-EKH copies itself to <Windows>\WinDrives.EXE.

The following registry entry is created to run WinDrives.EXE on startup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
WinDrives
<Windows>\WinDrives.EXE

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer