W32/Kelvir.A Worm

 Information about the W32/Kelvir.A Worm:

W32/Kelvir.A is a worm. The worm will infect Windows systems and spreads through MSN Messenger. The worm also attemps to download and execute a worm.

Upon execution the worm sends the following message to all the online contacts in MSN Messenger:

omg this is funny!
http://jose.rivera4.(blocked).net/cute.pif

When the above link is executed cute.pif file is downloaded on the system.

Upon execution, the cute.pif file downloads and executes malicious files from the predefined websites like:

http://www.(blocked)site.com/file.exe
http://home.(blocked).net/~mdeely/patch.exe

This worm first appeared on 7th March, 2005.

 Other names of W32/Kelvir.A Worm:

This Worm is also known as WORM_KELVIR.A, W32/Kelvir-B, W32/Kelvir.worm.b.