W32/Kelvir-F is an instant messaging worm that spreads by sending a message through Windows Messenger to all of an infected user's contacts.
W32/Kelvir-F encourages the recipient to visit a web page to download a file.
At the time of writing, the file at the URL specified in the message is named funnyashell.scr and is detected by Sophos's anti-virus products as W32/Rbot-ZU.
W32/Kelvir-F is an instant messaging worm that spreads by sending a message through Windows Messenger to all of an infected user's contacts.
W32/Kelvir-F encourages the recipient to visit a web page to download a file. The message text is randomly chosen from the following:
hey check this out I almost pee'd my pants <URL>
wow, i almost fell off the chair when i saw this <URL>
haha i just found the funniest drawing, check it out <URL>
wow, this drawing makes you feel like your on some type of drug <URL>
crazy, its like a virtual acidtrip or something, check it out <URL>
At the time of writing, the file at the URL specified in the message is named funnyashell.scr and is detected by Sophos's anti-virus products as W32/Rbot-ZU.