The Web    Google
3/8: Kelvir-D an IM Worm

3/8: Kelvir-D an IM Worm
March 8, 2005

W32/Kelvir-D is an instant messenging worm that spreads by sending a message through Windows Messenger to all of an infected user's contacts.

W32/Kelvir-D arrives attached to the message that encourages the recipient to visit a web page to download an update and reads:

lol! see it! u'll like it .

W32/Kelvir-D also attempts to download and execute ME.JPG and FILE.EXE files from the predefined websites.

For more information about ME.JPG see W32/Rbot-XA.

More information can be found at Sophos page.

  • AntiOnline Spotlight: Trojan Force
  • Apple Patches QuickTime Flaw
  • 4/6: Mydoom-AJ Worm Uses Email
  • Simplify File Recovery with Volume Shadow Copy Service
  • In the Year 2005, Will Your Anti-Spam Arsenal Be the Same?
  • Startup Unveils Web Server Assessment, Defense Toolkit
  • PentaSafe Unveils Integrated Security Manager
  • 10/28: Backdoor.Futro a Server Program
  • 6/2: Korgo-F Threat Level Heightened
  • 1/28: Sdbot.Worm!166912 Spreading
  • A New Breed of Phish
  • Security Camera Industry Information