New worms threaten IM users

NEW DELHI: PandaLabs has detected the appearance of three new worms -Kelvir.B, Kelvir.C and Fatso.A- programmed to spread via MSN Messenger.

The new Kelvir worms reach computer in messages with texts like: omg this is funny! (Kelvir.B) or lol! see it! u'll like it (Kelvir.C), which include a link to an Internet address. If the user clicks on this link, files containing the code of these worms will be downloaded and installed on the computer. These then send new messages to the contacts in MSN Messenger.






At the same time, they download variants of the Gaobot or Sdbot Trojans from another web address. These Trojans allow a hacker to gain remote control of the affected computer through IRC chat channels. It is important to mention that all of the web pages from which the Kelvir worms or the Sdbot or Gaobot Trojans are downloaded have already been blocked, preventing them from continuing to spread.

However, Panda Software's international tech support network detected, up until then, that Kelvir.B and Kelvir.C had spread widely to users' computers worldwide.