Welcome to the Virus Encyclopedia of Panda Security.
It stops services belonging to several security tools, including antivirus programs and firewalls. It uses instant messaging programs in order to send a link to a web address that downloads a copy of the worm Sdbot.DKE.
|First detected on:||May 10, 2005|
|Detection updated on:||May 11, 2005|
|Yes, using TruPrevent Technologies
Kelvir.AS is a Trojan that stops several services belonging to security tools, such as antivirus programs and firewalls, among others.
Kelvir.AS uses the instant messaging program MSN Messenger in order to send a link to all the addresses in the Contact List of the affected user. That link points to a web address that downloads a copy of the worm detected as Sdbot.DKE.
Kelvir.AS does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, e-mail messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc.>
Kelvir.AS is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.