high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 3 February 2005 14:25:06 (GMT) |
| Detected by | All Sophos products |
Sophos beta program
- Endpoint Security and Control 9.0
- Small business solutions 4.0
Action
- Summary
- Action
- More Information
Please follow the instructions for removing worms.
More Information
W32/Bropia-D is an MSN Messenger worm for the Windows platform that spreads by sending itself to the MSN Messenger contacts. W32/Bropia-D is a worm for the Windows platform that spreads using MSN Messenger.
Once executed W32/Bropia-D copies itself to the root folder using different filenames and to the Windows system folder with the filename msnus.exe
The worm monitors the status of MSN Messenger and sends a copy of itself to the Messenger contacts.
Also W32/Bropia-D creates the sexy.jpg file which is a JPEG image file in the root folder and drops a winhost.exe file to the Windows system folder.
 |
| The image used by the Bropia-D worm. |
For more information about winhost.exe see W32/Rbot-VH.
|
