Find a Partner
This window is encrypted for your security.
Need help? Ask the community or hire an expert.
Go to Avira Answers
Win32.Elkern.c [AVP], W32/Elkern.C [Sophos], Win32/WQK.C [CA], PE_ELKERN.D [Trend], W32/Elkern.cav.c [McAfee], W32.ElKern.4926
Sent by email.
W32/Elkern.C sends a randomly named file (Subject) and a random message (Body).
The virus infects randomly chosen PE files. It scans the drives, starting with a certain letter, until it reaches Z. It can also infect files from shared network sources.
W32.Elkern.C has a programming error, causing repeated file infection. This means that it can not use infected files again.
W32.Elkern.4926 does not change the registry entry, as other versions of the worm do.
Description inserted by Crony Walker on Tuesday, June 15, 2004