The Web    Google
3/8: Kelvir-D an IM Worm

3/8: Kelvir-D an IM Worm
March 8, 2005

W32/Kelvir-D is an instant messenging worm that spreads by sending a message through Windows Messenger to all of an infected user's contacts.

W32/Kelvir-D arrives attached to the message that encourages the recipient to visit a web page to download an update and reads:

lol! see it! u'll like it .

W32/Kelvir-D also attempts to download and execute ME.JPG and FILE.EXE files from the predefined websites.

For more information about ME.JPG see W32/Rbot-XA.

More information can be found at Sophos page.

  • House Passes Anti-Spyware Bill
  • 1/10: VBS/Mcon-G Worm Spreads Via IRC
  • 11/29: JS/Spawn-C an Encoded Worm
  • 4/5: Bdoor-ZAT Trojan Opens Backdoor
  • FTC: Identity Theft, Fraud on the Rise
  • Will Sobig Strike Again?
  • 1/12: Kobot-B Worm Uses 3 Windows Flaws
  • 1/7: Sdbot-TB Worm Lets Hackers In Via IRC
  • Hitachi offers up centralized application security platform
  • PGP: Extended Encryption For Compliance
  • 5/3: SymbOS/Locknut-C Infects Handsets
  • Security Camera Articles