NeonWizard Posted July 16, 2004 Report Share Posted July 16, 2004 As of 4:15 PM (GMT -07:00) DST, TrendLabs declared a Medium alert to control the spread of this new BAGLE variant that is spreading via email and network shares. Initial infection reports has been received from the U.S. and Canada. This worm utilizes SMTP (Simple Mail Transfer Protocol) to propagate via email.This worm arrives via email and network shares. Upon execution, it drops copies of itself as the following files in the Windows system folder: sysxp.exe sysxp.exeopen sysxp.exeopenopenBagle.AF by TrendmicroBagle.AF Secunia Advisory Quote Link to comment Share on other sites More sharing options...
andsome Posted July 17, 2004 Report Share Posted July 17, 2004 From a² a² NewsDear andsome,Worm.Win32.Bagle.AF alert!A new Bagle variant is spreading. Bagle.AF arrives via email as an attachment like all previous Bagle variants do. The email sender is spoofed to make it difficult to trace it back. Once the file attachment is run, the worm installs a backdoor trojan on the computer to enable remote administration. It seems that the worm author plans to create a large spam server farm which can be used to send tons of emails within a very short time. The installed trojan opens the port 1234 to receive control commands.Bagle.AF can be detected and removed with a² using the latest signature updates. The a² personal background guard blocks the worm immediately if it is started.A more detailed description of the worm can be found at the a² Malware Database:http://www.emsisoft.com/en/malware/?Worm.Win32.Bagle.AFSincerely yours,Your a² Teamhttp://www.emsisoft.comNote! This is an automatically sent post only email. Please do not reply. Kindly note our contact page on our website or login at the a² Control Center to change your newsletter subscription:http://cc.emsisoft.com/en/newsletter Quote Link to comment Share on other sites More sharing options...
moon Posted July 17, 2004 Report Share Posted July 17, 2004 Bagel viruses ? Uber-worms ? Oi vey !! Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.