1. Symantec/
  2. Security Response/
  3. W32.ElKern.3587


Risk Level 1: Very Low

January 17, 2002
February 13, 2007 11:38:02 AM
Also Known As:

W32.ElKern.3587 is a new variant of (and it has the same functionality as) the W32.ElKern.3326 virus.

This variant is dropped by W32.Klez.E@mm.

The only major addition to this variant is a recognition algorithm to guard against infecting self-extracting .rar and .zip archives.

Symantec offers a tool to remove infections of all known variants of W32.Klez and W32.ElKern. Click here to obtain the tool. This is the easiest way to remove these threats and should be tried first.

Note on W32.Klez.gen@mm detections: W32.Klez.gen@mm is a generic detection for variants of W32.Klez. Computers that are infected with W32.Klez.gen@mm most likely have been exposed to either W32.Klez.E@mm or W32.Klez.H@mm. If your computer is detected as infected with W32.Klez.gen@mm, download and run the tool. In most case, the tool will be able to remove the infection.

Antivirus Protection Dates

  • Initial Rapid Release version January 17, 2002
  • Latest Rapid Release version January 17, 2002
  • Initial Daily Certified version January 17, 2002
  • Latest Daily Certified version January 17, 2002
  • Initial Weekly Certified release date pending
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Atli Gudmundsson

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube