Jump to content

Virus Alert - Using Im As Transport Means


Recommended Posts

From Tech Republic:

Virus Alert: Worms set Trojan horse trap


Virus Name: Win32.Kelvir.a, Win32.Serflog.a (aka Sumom)

Rank: Medium to high risk

Type: e-mail worms

What it does: Worm drops multiple copies of itself, regenerates on IM startup

Means of transmission: Win32.Kelvir.a spreads via a URL inserted in an Instant Message, modifies IM software registry entries and forwards itself to all IM contacts. Win32.Serflog.a presents itself as an IM attachment and copies itself into folders shared by peer-to-peer e-mail clients.

How to recognize: Win32.Kelvir.a presents itself in an IM that reads "omg this is funny." Win32.Serflog.a affects MSN Messenger users and includes the message "???? Omg click this."

Who is at risk: MSN Messenger users

Virus brief

Antivirus companies on Tuesday flagged a new worm targeting MSN Messenger and a variation of an existing threat. Security researchers discovered the appearance of Win32.Kelvir.a, a new twist on the previously identified Kelvir threat. Researchers also identified a new worm in the wild; caked Win32.Serflog.a or Sumom. Both worms are rated medium-to-high risks.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Unfortunately, your content contains terms that we do not allow. Please edit your content to remove the highlighted words below.
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Create New...