Published Jul 23, 2010 | Updated Sep 15, 2017


Severe |Detected with Windows Defender Antivirus

Aliases: Packed.Win32.Krap.w (Kaspersky) Win32/Kryptik.BPF (ESET) Mal/Bredo-E (Sophos) Trojan.Win32.Bredolab.Gen.1 (Sunbelt Software)


Worm:Win32/Nekav.C is a worm that spreads to all writeable drives, including removable drives and network shares. It displays a fake warning message accusing the user of having an unlicensed software and prompting the user to purchase the license by sending an SMS to a specific number. However, without the unlock code provided with the purchase, the warning message remains on top of all other programs preventing the user from accessing the desktop properly.
To detect and remove this threat and other malicious software that may be installed in your computer, run a full-system scan with an up-to-date antivirus product such as the following:
For more information on antivirus software, see
Follow us