Click to See Complete Forum and Search --> : New worm W32.Bropia.J
Irongeek
February 5th, 2005, 05:04 AM
Looks like a new worm/virus is going around called W32.Bropia.J, my buddy Basil just got hit by it. Don't run executable file types you get from IM clients (Trilian, AOL IM, Yahoo IM etc.) Better yet, if you are not sure don't run ANY files sent to you over IM (instant message) clients.
More info here:
http://securityresponse.symantec.com/avcenter/venc/data/w32.bropia.j.html
Here are some of the know file names:
# LOL.scr
# Webcam.pif
# bedroom-thongs.pif
# naked_drunk.pif
# LMAO.pif
# ROFL.pif
# underware.pif
# Hot.pif
# new_webcam.pif
Irongeek
February 5th, 2005, 05:27 AM
Here is a copy for those that want to dissect it (it may be a variant of the above worm)
Outer_Heaven
February 5th, 2005, 08:04 PM
Is this worm being sent out only through MSN messenger? Cause that is the only one Symantec's Security Response mentions. Or is it like you said, that they are using all those other IM's to spread it, as well?
Irongeek
February 5th, 2005, 08:09 PM
It just sends from MSN, but a Trillian user can receive it.
Outer_Heaven
February 5th, 2005, 08:10 PM
I just found this other link about the W32.Bropia.J dated February 3rd, 2005 here:
http://www.iol.co.za/index.php?set_id=1&click_id=31&art_id=qw1107425701327B235
and it is only mentioning a warning for MSN users
Irongeek
February 5th, 2005, 08:12 PM
Only MSN clients can send it, but since Trillian can talk to MSN clients it can still receive it.
radical edward-
February 5th, 2005, 11:59 PM
The only way you become infected is if you execute the file that has been sent to you, correct?
Irongeek
February 6th, 2005, 02:06 AM
Yep.
Outer_Heaven
February 6th, 2005, 02:10 AM
Alright, thanks for the heads up