Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 3 February 2005 14:25:06 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing worms.
More Information
W32/Bropia-D is an MSN Messenger worm for the Windows platform that spreads by sending itself to the MSN Messenger contacts. W32/Bropia-D is a worm for the Windows platform that spreads using MSN Messenger.
Once executed W32/Bropia-D copies itself to the root folder using different filenames and to the Windows system folder with the filename msnus.exe
The worm monitors the status of MSN Messenger and sends a copy of itself to the Messenger contacts.
Also W32/Bropia-D creates the sexy.jpg file which is a JPEG image file in the root folder and drops a winhost.exe file to the Windows system folder.
![]() |
| The image used by the Bropia-D worm. |
For more information about winhost.exe see W32/Rbot-VH.


