Malware type: Worm

Aliases: IM-Worm.Win32.Kelvir.al (Kaspersky), W32/Kelvir.worm.gen (McAfee), W32.Kelvir.AE (Symantec), Worm/SdBot.11776.1 (Avira), W32/Kelvir-Gen (Sophos),

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 98, ME, NT, 2000, XP

Encrypted: No

Description: 

This worm sends a message to all online MSN users listed on the contacts of infected user.

Once a receiver clicks on the link provided in the message, this worm downloads and executes the file HELP32.EXE. Trend Micro detects this particular file as WORM_SDBOT.BMU.

For additional information about this threat, see:
Solution
Technical Details

Description created: Apr. 20, 2005 5:51:45 AM GMT -0800
Description updated: Apr. 20, 2005 6:02:38 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.