Experts at Sophos have warned computer users about a new version of the Bropia worm which spreads via the MSN Messenger online chat system.
The W32/Bropia-R worm sends itself to all contacts in an infected user's MSN Messenger buddy list, in an attempt to drop a copy of another worm – the W32/Rbot-WN network worm and backdoor Trojan horse. This malicious worm allows hackers to take remote control of infected computers, allowing them to capture keystrokes and grab screenshots (allowing opportunities for identity fraud), and even capture webcam footage of the unsuspecting user.
When first run, Bropia-R may display an error message that reads "Enkele bestanden konden niet gemaakt worden. Sluit alle toepassingen, start Windows opnieuw op en start deze installatie opnieuw op" which translates into English says "Some files could not be created, close all application windows and start this installation again."
The Bropia-R worm displays a comical image of a toothbrush and toilet roll on infected computers.
Graham Cluley, senior technology consultant for Sophos said,
"Some may be amused by the bathroom humour, but people hit by this worm may be flushing their security down the lavatory. Staff should be encouraged to take security seriously, and be taught to be wary of opening unsolicited attachments – even if they come in via instant messaging systems rather than regular email."
An earlier version of the Bropia worm which spread via instant messaging displayed a picture of a sunburnt chicken.