The Web    Google
4/15: Kelvir-J an IM Worm

4/15: Kelvir-J an IM Worm
April 15, 2005

W32/Kelvir-J is an instant messaging worm. W32/Kelvir-J spreads by sending a message through Windows Messenger to all of the infected user's contacts.

W32/Kelvir-J encourages the recipient to visit a website to download a file which is usually a copy of the worm. The message text is "it's you (URL)".

It may also drop a file detected by Sophos as W32/Sdbot-XE.

More information can be found at Sophos page.

  • Researcher: IE Cumulative Patch Inadequate
  • Searching for Wi-Fi Security Solutions
  • Humans Still Weakest Security Link
  • 1/27: Worm_Bropia-D Drops Other Malware
  • 5/16: Ascetic-C Trojan Sends German Emails
  • 2/21: Derdero-B Worm Uses File Sharing
  • Biometrics Makes Passwords Positively Paltry
  • Sasser Worm Spreading Rapidly
  • 1/4: Sdbot-AI Worm/Trojan Lets Hackers In
  • 9/1: Bugbear-I a Mass-Mailing Worm
  • A case study in security incident forensics and response.
  • Security Camera News