Symantec.com > Enterprise > Security Response > Trojan.UpsetKelk

Trojan.UpsetKelk

Discovered:
October 9, 2002
Updated:
February 13, 2007 11:57:11 AM
Type:
Trojan Horse
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

Trojan.UpsetKelk is a Trojan horse that decrypts and runs both W32.Klez.H@mm and W32.Elkern.4326 on infected computers. The Trojan attempts to terminate Norton AntiVirus (NAV) processes and services. It also attempts to disable NAV Auto-Protect.

The Trojan is written using Microsoft Visual C++.

Antivirus Protection Dates

  • Initial Rapid Release version October 9, 2002
  • Latest Rapid Release version August 20, 2008 revision 017
  • Initial Daily Certified version October 9, 2002
  • Latest Daily Certified version August 20, 2008 revision 016
  • Initial Weekly Certified release date October 9, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Kaoru Hayashi

Search Threats

Search by name

Example: W32.Beagle.AG@mm
ThreatCon Widget
Internet Security Threat Report, Volume 16
Symantec DeepSight Screensaver