The Web    Google
4/29: Bropia-AJ Worm Messages IM Users

4/29: Bropia-AJ Worm Messages IM Users
April 29, 2005

W32/Bropia.worm.aj is a threat similar to both the W32/Bropia and W32/Kelvir worm families. It attempts to send the following message to IM contacts via MSN Messenger:

rofl, is this you?
http://dba.{removed} .us/pictures.php?email =

If the recipient chooses to follow the hyperlink, they will be prompted to save or run an executable file. At the time of this writing, the executable served by the remote site was a variant of the W32/Sdbot.worm.

More information can be found at McAfee page.

  • FTC: Identity Theft, Fraud on the Rise
  • 8/20: Rbot-GS Exploits Vulnerabilities
  • 1/27: Rbot-AIX Worm Has Backdoor Functions
  • 9/7: MyWife-C a Mass-Mailing Worm
  • 1/26: Patco-A Worm Replaces Doc Files
  • 1/12: Mugly-D Worm Drops IRC Backdoor
  • Mass-Mailing Worm Copies Itself to Windows Folder
  • Disaster Recovery Vs. Business Continuity
  • Netsky-P a Year Old and Going Strong
  • Stomping Out Spam: The Spam Series, Part 1
  • AirDefense Describes Lack of Client Security at Show
  • Home Security Camera Background