Topics
General News Antivirus Reviews Network Defense Spyware Anti-Spam Phishing Scams Virus Alerts

Security Forums
Desktop Security Malware Removal Help Spam Blocking Patches and Hotfixes Antivirus Support Network Security Firewalls and Routers Intrusion Detection Web Proxies

Quick Resources
About Antisource Malware Threats Triangle Free Virus Scan Virus Map

New Variants of the Bagle Worm

Friday, October 29, 2004
Author: Schadenfroh
Permalink: 20041029161242508

Virus Alerts

link to article
http://www.eweek.com/article2/0,1759,1696931,00.asp

"Both variants are capable of spreading through peer-to-peer networks, as well as via e-mail. Both arrive in e-mail messages with spoofed sending addresses and one of a handful of meaningless subject lines, such as "Re:" "Re: Hello" or "Re: Thank you." The bodies of both variants contain just a single emoticon, and the name of the virus-infected attachment is either "Price," "price" or "Joke.""

New Variants of the Bagle Worm
Authored by: jgaylord on Sunday, October 31, 2004

Another link: http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_BAGLE.AU

Here is some additional info regarding the worm:

From:
Subject any of the following
• Re:
• Re: Hello
• Re: Hi
• Re: Thank you!
• Re: Thanks :)

Message body: any of the following
• :)
• :))

Attachment:
any of the following
• PRICE
• JOKE

with the following extension names
• COM
• CPL
• EXE
• SCR
Reply to This