New worm W32.Bropia.J

Looks like a new worm/virus is going around called W32.Bropia.J, my buddy Basil just got hit by it. Don't run executable file types you get from IM clients (Trilian, AOL IM, Yahoo IM etc.) Better yet, if you are not sure don't run ANY files sent to you over IM (instant message) clients.

More info here:
http://securityresponse.symantec.com....bropia.j.html

Here are some of the know file names:

# LOL.scr
# Webcam.pif
# bedroom-thongs.pif
# naked_drunk.pif
# LMAO.pif
# ROFL.pif
# underware.pif
# Hot.pif
# new_webcam.pif

Here is a copy for those that want to dissect it (it may be a variant of the above worm)

Is this worm being sent out only through MSN messenger? Cause that is the only one Symantec's Security Response mentions. Or is it like you said, that they are using all those other IM's to spread it, as well?

It just sends from MSN, but a Trillian user can receive it.

I just found this other link about the W32.Bropia.J dated February 3rd, 2005 here:

http://www.iol.co.za/index.php?set_i...7425701327B235


and it is only mentioning a warning for MSN users

Only MSN clients can send it, but since Trillian can talk to MSN clients it can still receive it.

The only way you become infected is if you execute the file that has been sent to you, correct?

Yep.

Alright, thanks for the heads up