|
Monday, 18 July 2005 |
W32.Kelvir.FJ is a worm that spreads through MSN Messenger.
Type: Worm
Infection Length: 24,576 bytes
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
When W32.Kelvir.FJ is executed, it performs the following actions:
Sends the following message to all the MSN Messenger contacts on the compromised computer:
[http://]chatpr.org/[REMOVED]msn.php?email=[EMAIL ADDRESS]
hey, come chat with all of us, k?
If a user clicks on the above link, the worm will download a remote file and save it as [EMAIL ADDRESS]. At the time of writing, the above URL was unavailable.
Note: [EMAIL ADDRESS] is the address of the recipient from their MSN profile. |
