W32.Kelvir.B Mar 7, 2005
Aliases:	None
Type:	Worm
Description:	Once executed, W32.Kelvir.B performs the following actions: Sends the following message to all the Windows and MSN Messenger contacts on the compromised computer: "[Link to a Web site on the home.earthlink.net domain] lol! see it! u`ll like it" When the contacts download the file, they in turn are also infected. This virus propagates quite rapidly.
Solution:	1) Disable System Restore (Windows Me/XP). 2) Update your virus definitions. 3) Run a full system scan and delete all the files detected as W32.Kelvir.B.

BACK