[virusinfo] W32/Kelvir-D

  • From: "Mike" <mikebike@xxxxxxxxx>
  • To: virusinfo@xxxxxxxxxxxxx
  • Date: Fri, 29 Apr 2005 09:17:18 -0700

From; Sophos Alert System:

Name: W32/Kelvir-D
Aliases: W32/Kelvir.worm.d
Type: Win32 worm
Date: 29 April 2005

A virus identity (IDE) file which provides protection is
available now from the Sophos website, and will be incorporated
into the June 2005 (3.94) release of Sophos Anti-Virus.

Customers using EM Library, PureMessage or any of our Sophos
small business solutions will be automatically protected at
their next scheduled update.

At the time of writing, Sophos has received a small number of
reports of this worm from the wild.


Note: The IDE issued for  W32/Kelvir-D at 21:42 GMT on 7 March
also contained detection for W32/Rbot-XA, Troj/Rindas-A, 
W32/Rbot-XB, Troj/Banker-KQ, Troj/Mosuck-G, Troj/Small-DJ and
Troj/Ablank-F. This IDE has now been updated to enhance
detection of Troj/Small-DJ.  

Information about W32/Kelvir-D can be found at:
http://www.sophos.com/virusinfo/analyses/w32kelvird.html

This IDE file also includes detection for:

W32/Rbot-XA
http://www.sophos.com/virusinfo/analyses/w32rbotxa.html
Troj/Rindas-A
http://www.sophos.com/virusinfo/analyses/trojrindasa.html
W32/Rbot-XB
http://www.sophos.com/virusinfo/analyses/w32rbotxb.html
Troj/Banker-KQ
http://www.sophos.com/virusinfo/analyses/trojbankerkq.html
Troj/Mosuck-G
http://www.sophos.com/virusinfo/analyses/trojmosuckg.html
Troj/Small-DJ
http://www.sophos.com/virusinfo/analyses/trojsmalldj.html
Troj/Ablank-F
http://www.sophos.com/virusinfo/analyses/trojablankf.html

Download the IDE file from:
http://www.sophos.com/downloads/ide/kelvir-d.ide

Download all the IDE files available for the current version of 
Sophos Anti-Virus in a single compressed file. The file is
available in two formats:

Zip file:
http://www.sophos.com/downloads/ide/ides.zip

Self-extracting file:
http://www.sophos.com/downloads/ide/ides.exe

Read about how to use IDE files at
http://www.sophos.com/downloads/ide/using.html






---------------------------------------------------------------------
To unsubscribe, email: notification-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, email: notification-faq@xxxxxxxxxxxxxxxx




Other related posts: