| | site-map | e-mail

User:

Guest

Name: Password:

www.center.hu / Archive / Security news / march, 2005 / Win32.Bropia.T (CA.com) 

Win32.Bropia.T (CA.com)

Win32.Bropia.T (CA.com)

Description Published: 2005. március 6.
Description Modified: 2005. március 7.

The information below provides details about this virus.

Threat Assessment

Overall Risk: None
Wild: Low
Destructiveness: None
Pervasiveness: None


Characteristics

Type: Worm
Category: Win32
Also known as: Win32/Bropia.Variant!Worm, W32/Kelvir.A (F-Secure), IM-Worm.Win32.Kelvir.a (Kaspersky)


* Includes updates for InoculateIT and eTrust InoculateIT 6.0.
Download Signature Files
Scan For Viruses
Cleaning Utilities
Submit a Virus Sample

Description

Bropia.T is a worm that spreads via MSN/Windows Messenger. It sends messages that contain a URL containing the worm executable:

omg this is funny! http://jose.rivera4.home.att.***/****.***

The worm may also download a file from the following URL:

http://home.comcast.net/*******/patch.exe

Note: These URLs have been modified.

The worm saves the downloaded file to ˝c:patch.exe˝ and executes it. At the time of writing, the file at this location was Win32/Rbot.BWD worm. For more information on the Win32.Rbot family, please see elsewhere in our encyclopedia.

Note: This is a preliminary analysis - additional information will be added to this description as it comes to hand.

More information on CA Virus Information Center: 
http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=42014

Computer Associates – the Trusted Source of Security Knowledge

2005-03-07 11:23

Back