W32.Kitro.C.Worm

W32.Kitro.C.Worm is an Internet worm that can arrive as an email attachment with a .cpl file extension. It copies itself to the windows directory and attempts to spread to the MSN messenger contacts of the user by email.

The original name, W32.Duni.Worm, was derived from a string "unidadworm" that is located in the worm's code.

Protection

• Initial Rapid Release version July 3, 2002
• Latest Rapid Release version July 12, 2008 revision 018
• Initial Daily Certified version July 3, 2002
• Latest Daily Certified version July 12, 2008 revision 019
• Initial Weekly Certified release date July 3, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 3 - 9
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Medium