What is the Bropia worm?

1. Bropia opens and locks %System%\taskmgr.exe, %System%\cmd.exe, to prevent these programs from being started.
   
2. Searches for files: %System%\adaware.exe, %System%\VB6.EXE.exe, %System%\lexplore.exe, %System%\Win32.exe.
   
3. Executes C:\osm.exe.
   
4. Copies following files to the C drive
   
   • Drunk_lol.pif
   • Webcam_004.pif
   • sexy_bedroom.pif
   • naked_party.pif
   • love_me.pif
     
5. Monitors the status of MSN Messenger contacts, sends a copy of the worm to the contacts list.
   
6. Disables right mouse button so you cannot right click to access context sensitive menus.
   
7. Adds the value: "lexplore" = "lexplore.exe"

How to Remove the Bropia Worm?

Sponsored Links:

Detect and Removal Instruction for Other Variants:

• Bropia  
• Bropia.C  
• Bropia.J

More Detection and Removal Instructions for Worms