Secunia has just declared MEDIUM RISK on Kelvir.B and Symantec also shows a high prevelance of this worm. The Spybot version dropped as a part of a "two-in-one" virus is more damaging than the Kelvir worm in an unpatched corporate network. W32.Kelvir.B is a worm that spreads through Windows Messenger and MSN Messenger and attempts to download and execute a variant of W32.Spybot.Worm.

Kelvir.B -- New Messenger worm is MEDIUM RISK
http://secunia.com/virus_information/16006/

EXAMPLE


Additional links on this new Messenger worm

Kelvir.A
Secunia (Low Risk)
http://secunia.com/virus_information/15994/kelvir/

McAfee (Low Risk, W32/Kelvir.
http://vil.nai.com/vil/content/v_132208.htm

Sophos (Low risk, W32/Kelvir-
http://www.sophos.com/virusinfo/analyses/w32kelvirb.html

Symantec (Level 2, W32.Kelvir.A)
http://www.sarc.com/avcenter/venc/data/w32.kelvir.a.html

Trend Micro (Low Risk, WORM_KELVIR.A)
http://www.trendmicro.com/vinfo/virusencyc...RM%5FKELVIR%2EA

F-Secure (No risk, Both variants)
http://www.f-secure.com/v-descs/kelvir.shtml


Kelvir.B
Secunia (Medium Risk)
http://secunia.com/virus_information/16006/kelvir.b/

Trend Micro (WORM_KELVIR.B, Medium Risk)
http://www.trendmicro.com/vinfo/virusencyc...e=WORM_KELVIR.B

Symantec (W32.Kelvir.B, Level 2)
http://securityresponse.symantec.com/avcen...2.kelvir.b.html

Kelvir.C
McAfee (W32/Kelvir.worm.c, Low Risk)
http://vil.nai.com/vil/content/v_132210.htm

is there anyway to remove it?