|
Friday, 29 April 2005 |
W32.Kelvir.AX is a Trojan that sends a message to all MSN messenger contacts on the compromised computer.
Type: Worm
Infection Length: 12,800 bytes
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
When W32.Kelvir.AX is executed, it sends the following message to all the MSN messenger contacts on the compromised computer:
hey its you!
http://imperialhost.net/pictures/gallery.php?email=[email address]
Notes:
[email address] is determined by the Trojan.
At the time of writing, this link lead to a clean HTML page with a notice stating "This Account Has Been Suspended".
|
