1. Symantec/
  2. Security Response/
  3. W32.Kitro.C.Worm


Risk Level 1: Very Low

July 2, 2002
February 13, 2007 11:49:42 AM
Also Known As:
W32.Duni.Worm, WORM_DANDI.A [Trend], Worm/Duni [Vexira], W32/Duni.Worm [NAI], I-Worm.Duni [AVP], W32/Duni-A [Sophos]
Systems Affected:

W32.Kitro.C.Worm is an Internet worm that can arrive as an email attachment with a .cpl file extension. It copies itself to the windows directory and attempts to spread to the MSN messenger contacts of the user by email.

The original name, W32.Duni.Worm, was derived from a string "unidadworm" that is located in the worm's code.

Antivirus Protection Dates

  • Initial Rapid Release version July 3, 2002
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version July 3, 2002
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date July 3, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Patrick Nolan

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube