Sophos

W32/Kelvir-A

Aliases
  • IM-Worm.Win32.Kelvir.a
  • W32/Kelvir.worm.a
Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Chat programs
Affected operating systems Windows
Protection available since 25 February 2005 12:55:15 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

W32/Kelvir-A is an instant messaging worm.

W32/Kelvir-A spreads by sending a message through Windows Messenger to all of an infected user's contacts. The message encourages the recipient to visit a web page to download an update and reads:

*** URGENT *** Download the latest patch from <URL> to prevent getting infected by W32.Bropia.C. W32/Kelvir-A is an instant messaging worm.

W32/Kelvir-A spreads by sending a message through Windows Messenger to all of an infected user's contacts. The message encourages the recipient to visit a web page to download an update and reads:

*** URGENT *** Download the latest patch from <URL> to prevent getting infected by W32.Bropia.C.

At the time of writing, this URL was unavailable.

W32/Kelvir-A will attempt to download a file named PATCH.EXE from a remote website. At the time of writing, this file was unavailable.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer