New MSN Messenger Worms

7 March 2005 4 Comments

A new batch of IM-related worms have been discovered over the weekend. These affect MSN Messenger (which I use almost exclusively and daily). The one worm, dubbed Kelvir.a and Kelvir.b, sends messages to contact list recipients on the infected PC with a link to a .pif file which opens up a backdoor to the users machine.

The second one is called Sumon and it attempts to take down any possible security precautions including rewriting the HOSTS file. Mostly a social engineering hook.

Pick up your copy of the WordPress Bible, a wildly popular resource for beginners and experts alike.

Popularity: 1% [?]

Tags: Security, Technology

4 Responses to “New MSN Messenger Worms”

Mike Bourne 8 March 2005 at 8:02 pm #

Ah, I wondered why I had so many people sending me the same link. Luckily I never opened it as the .pif extension tipped me off. Who uses that extension these days anyways ;)
Mike Bourne 8 March 2005 at 9:02 pm #

Ah, I wondered why I had so many people sending me the same link. Luckily I never opened it as the .pif extension tipped me off. Who uses that extension these days anyways ;)
Marc James 9 March 2005 at 11:06 pm #

As usual, this doesn’t effect my Powerbook. Windows suckers. :P
Marc James 10 March 2005 at 12:06 am #

As usual, this doesn’t effect my Powerbook. Windows suckers. :P