Summary

Summary
Action
More Information
| How it spreads |
|
|---|---|
| Affected operating systems | Windows |
| Characteristics |
|
| Included in our products from | November 2007 (4.23) |
| Protection available since | 19 September 2007 15:14:11 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing worms.
More Information
W32/Small-EKH is a worm for the Windows platform.
W32/Small-DHR may spread to locally accessible drives
When first run W32/Small-EKH copies itself to <Windows>\WinDrives.EXE.
The following registry entry is created to run WinDrives.EXE on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
WinDrives
<Windows>\WinDrives.EXE
