Meet Spybot’s new faithful sidekick, Kirvo. Kirvo is a Trojan which goes on advance recon for Spybot, spreading via instant messenger messages which appear to come from friends on the instant messenger user’s buddy list. If the message’s recipient clicks on a link contained in the message, the Kirvo trojan is installed on the user’s computer system, and then Kirvo fetches its friend, the dastardly worm Spybot.
According to Tim Hartman of Symantec, Kirvo takes advantage of the user “by enticing him or her to click the link and launch the Trojan. Once launched, it attempts to download a variant of Spybot, which is a true worm that takes advantage of several vulnerabilities. Kirvo appears to have been developed to assist SpyBot propagation and increase the army of Spybot zombies on the internet.”
The obvious way to avoid Kirvo and Spybot is to not click on links in instant messages, at least not before confirming that the message really came from your buddy, and that the link is legitimate.
Unfortunately, it always comes down to the user, and users are not always as savvy as we would like them to be. Indeed, in a survey which we conducted, the overwhelming majority of respondents have indicated that they think that the worst problem on the Internet is not spam, spyware, or worms, but “stupid users”.
|No Paywall Here!
The Internet Patrol is and always has been free. We don't hide our articles behind a paywall, or restrict the number of articles you can read in a month if you don't give us money. That said, it does cost us money to run the site, so if something you read here was helpful or useful, won't you consider donating something to help keep the Internet Patrol free?