W32/Bropia.M Worm

 Information about the W32/Bropia.M Worm:

W32/Bropia.M is a worm. This worm is a variant of W32/Bropia.A. The worm will infect Windows systems and spreads through MSN Messenger.

Upon execution, the worm copies itself as ISASS.EXE in the Windows System folder. It also copies itself as;

sexy.pif
Kool.pif
Me Pissed!.pif
titanic2.jpg.pif
Me & you pic!.pif
Beautiful Ass.pif
she's fuckin fit.pif
John Kerry as Super Chicken.scr
She Could Fit her Ass in a Teacup.pif

in the root of C: drive.

It alters the windows registry at the following location to load itself during next startup;

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices

The worm also copies l0l_53xy_l0l.html and executes it. Upon execution, the html file connects to some websites in its predefined lists.

The worm also tries to terminate the following processes;

taskmgr.exe
msconfig.exe
regedit.exe

The worm propagates by sending a copy of itself via MSN Messenger.

This worm first appeared on 11th February, 2005.

 Other names of W32/Bropia.M Worm:

This Worm is also known as WORM_BROPIA.M, W32/Bropia.worm.m .