If your mouse's right click has stopped working or your volume controls are behaving oddly lately, blame it on MSN Messenger and the Bropia worm that sends itself to contacts on the Messenger contact list.
Security firm Symantec has labeled the worm, discovered on January 19, as low-damage and medium-spread. The worm when executed prevents the task manager from being started and searches for files like adaware.exe, VB6.exe, Iexplore.exe and Win32.exe. It then drops and executes the W32.Spybot.worm. The spybot variant is executed when Windows starts.
The worm also tries to copy itself to the C:\ and Systems folder as Drunk_lol.pif, Webcam_004.pif, sexy_bedroom.pif, naked_party.pif or love_me.pif.
It then monitors for changes in the status of the MSN contacts and sends copies of itself to the contacts in Messenger. It also disables the right mouse button so you cannot right click to access context sensitive menus.
According to F-Secure, Spybot that the worm drops in the PC can be used as a backdoor, collecting system information, logging keystrokes and relaying spam and for various other purposes. It can also manipulate Windows mixer volume settings.
