TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
WORM_BROPIA.I
Overview

Malware type: Worm

Aliases: IM-Worm.Win32.Bropia.d (Kaspersky), W32/Bropia.worm.k (McAfee), W32.Bropia (Symantec), Worm/Bropia.I.2 (Avira), W32/Bropia-I (Sophos),

In the wild: Yes

Destructive: No

Language: English

Platform: Windwos ME, NT, 2000, XP

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

High

Distribution potential:

High

Description: 

Like the earlier BROPIA variants, this memory-resident worm spreads copies of itself via MSN messenger, a popular chat application. However, this variant does not drop the SEXY.JPG image file that most of its earlier variants are known to drop and display on an affected machine to hide its malicious routines.

It also has a stealth mechanism, in which it terminates itself when it has detected that there is a debugger program installed on the system.

This worm drops another malware file, which Trend Micro detects as WORM_SDBOT.ANY.

It has a payload of disabling the right-click feature of the mouse.

For additional information about this threat, see:
Solution
Technical Details

Description created: Feb. 9, 2005 3:55:17 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.