Sophos

W32/Kelvir-B

Aliases
  • IM-Worm.Win32.Kelvir.a
Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Web downloads
  • Chat programs
Affected operating systems Windows
Protection available since 6 March 2005 23:38:17 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

W32/Kelvir-B is an instant messenging worm.

W32/Kelvir-B spreads by sending a message through Windows Messenger to all of an infected user's contacts. The message encourages the recipient to visit a web page to download an update and reads:

omg this is funny! <URL>

W32/Kelvir-B will attempt to download a file named PATCH.EXE from a remote website and save it as C:\patch.exe

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer