From; Sophos Alert System: Name: W32/Kelvir-D Aliases: W32/Kelvir.worm.d Type: Win32 worm Date: 29 April 2005 A virus identity (IDE) file which provides protection is available now from the Sophos website, and will be incorporated into the June 2005 (3.94) release of Sophos Anti-Virus. Customers using EM Library, PureMessage or any of our Sophos small business solutions will be automatically protected at their next scheduled update. At the time of writing, Sophos has received a small number of reports of this worm from the wild. Note: The IDE issued for W32/Kelvir-D at 21:42 GMT on 7 March also contained detection for W32/Rbot-XA, Troj/Rindas-A, W32/Rbot-XB, Troj/Banker-KQ, Troj/Mosuck-G, Troj/Small-DJ and Troj/Ablank-F. This IDE has now been updated to enhance detection of Troj/Small-DJ. Information about W32/Kelvir-D can be found at: http://www.sophos.com/virusinfo/analyses/w32kelvird.html This IDE file also includes detection for: W32/Rbot-XA http://www.sophos.com/virusinfo/analyses/w32rbotxa.html Troj/Rindas-A http://www.sophos.com/virusinfo/analyses/trojrindasa.html W32/Rbot-XB http://www.sophos.com/virusinfo/analyses/w32rbotxb.html Troj/Banker-KQ http://www.sophos.com/virusinfo/analyses/trojbankerkq.html Troj/Mosuck-G http://www.sophos.com/virusinfo/analyses/trojmosuckg.html Troj/Small-DJ http://www.sophos.com/virusinfo/analyses/trojsmalldj.html Troj/Ablank-F http://www.sophos.com/virusinfo/analyses/trojablankf.html Download the IDE file from: http://www.sophos.com/downloads/ide/kelvir-d.ide Download all the IDE files available for the current version of Sophos Anti-Virus in a single compressed file. The file is available in two formats: Zip file: http://www.sophos.com/downloads/ide/ides.zip Self-extracting file: http://www.sophos.com/downloads/ide/ides.exe Read about how to use IDE files at http://www.sophos.com/downloads/ide/using.html --------------------------------------------------------------------- To unsubscribe, email: notification-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, email: notification-faq@xxxxxxxxxxxxxxxx