high
Summary
Summary
Action- More Information
| How it spreads |
|
|---|---|
| Affected operating systems | Windows |
| Characteristics |
|
| Protection available since | 23 February 2005 21:44:24 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing worms.
More Information
W32/Bropia-R is a worm for the Windows platform.
The worm then displays a comical image as it installs the embedded EXE files.
W32/Bropia-R monitors the status of MSN Messenger and sends a copy of itself to Messenger contacts. W32/Bropia-R is a worm for the Windows platform.
The worm is a self-extracting archive which drops the following files to the current folder and then runs them:
game.exe - detected by Sophos's anti-virus products as W32/Bropia-R
ms64.exe - detected by Sophos's anti-virus products as W32/Rbot-WN
loud.exe - detected by Sophos's anti-virus products as W32/Forbot-GL
When first run, W32/Bropia-R may display an error message that reads "Enkele bestanden konden niet gemaakt worden. Sluit alle toepassingen, start Windows opnieuw op en start deze installatie opnieuw op" which loosely translated into English says "Some files could not be created, close all application windows and start this installation again."
The worm then displays a comical image as it installs the embedded EXE files.
 |
| The image displayed by the Bropia-R worm. |
W32/Bropia-R monitors the status of MSN Messenger and sends a copy of itself to Messenger contacts.
|
