Sophos

W32/Small-EKH

Aliases
  • Worm.Win32.Small.l
  • TROJ_SMALL.EAK
  • Application-WinDrives
  • W32/Worm.GTS
Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Network shares
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from November 2007 (4.23)
Protection available since 19 September 2007 15:14:11 (GMT)
Detected by All Sophos products

Action

More Information

W32/Small-EKH is a worm for the Windows platform.

W32/Small-DHR may spread to locally accessible drives

When first run W32/Small-EKH copies itself to <Windows>\WinDrives.EXE.

The following registry entry is created to run WinDrives.EXE on startup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
WinDrives
<Windows>\WinDrives.EXE

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer