The Web    Google
3/30: Kelvir-F IM Worm Sends Message

3/30: Kelvir-F IM Worm Sends Message
March 30, 2005

W32/Kelvir-F is an instant messaging worm that spreads by sending a message through Windows Messenger to all of an infected user's contacts. W32/Kelvir-F arrives attached to a message that encourages the recipient to visit a web page to download a file.

At the time of writing, the file at the URL is named funnyashell.scr and is detected by Sophos's anti-virus products as W32/Rbot-ZU.

More information can be found at Sophos page.

  • MyDoom Ends but Open Ports Attracting Mutants
  • Corporate Data Leaks Spur Interest in Storage Security
  • 10/12: Bagle-AC Worm Sends Fake Message
  • 'Critical' Windows Hijack Flaw Reported
  • MFPs ?An Overlooked Security Risk
  • 11/1: Bagle-BE Worm Opens TCP Port
  • A Spec to Spike Spam?
  • 1/27: Rbot-AIX Worm Has Backdoor Functions
  • Visa is monitoring merchants for security compliance
  • Outtasking Solution to Company's Email Woes
  • Too Many Lost Emails Leave us Unconnected
  • Computer security background information