Kelvir.B
Threat risk
|
Detection files published:
7 March 2005 |
Description created:
2005-03-07 |
Description updated:
2005-03-07 |
|
Alias:
|
Spreading mechanism
Other | |
|
Payload:
| ||
Summary
Kelvir.B is a worm that spreads through MSN Messenger.
Spreading description
The worm spreads as a link pointing to the file
http://home.xxxxx.net/~gallery10/omg.pif omg.pif
(the xxxxx's in the URL above replace the original name)
When a user clicks the link, the default webbrowser will open and download the file. If the user open/executes the file, he risks infecting his computer.
The virus will then send a link to the infected file to all users in the MSN contact list, before it downloads and installs a second virus, W32/Spybot.EZO.
Removal
General information about removal of malicious software
Norman's antivirus products are in general able to remove all malicious software that is detected.
Some malware, however, uses techniques that the general product does not remove sufficiantly. We have therefore developed the free product Norman Malware Cleaner. Please use the latest version of this program from the link below - if your Norman antivirus is unable to clean-up the infection.
| Utilisation | Titre | Commentaire |
|---|---|---|
| Stopper la propagation des virus sur les partages réseau | ||
| Cleaning of back-up folders on Windows Me and XP |
