|
Description:
This BAGLE variant has both worm and backdoor functionalities. It spreads by sending itself via email to addresses it gathers from certain files in the infected machine. The email message it sends out has varying subjects, message bodies, and attachment file names. It usually arrives bearing the Wordpad icon.
Similar to other BAGLE variants, this worm also attempts to spread via shared folders by dropping copies of itself in folders that have the text string "shar" in their names.
As a backdoor, it opens port 2745, enabling it to download and execute an updated copy of itself.
This UPX-compressed worm also terminates certain processes and runs on Windows 95, 98, ME, NT, 2000, and XP.
For additional information about this threat, see:
Solution
Technical Details
Description created: Mar. 2, 2004 2:03:41 PM GMT -0800
Description updated: Mar. 2, 2004 12:00:00 AM GMT -0800
Search a new malware
Tell us how we did. Take our quick survey.
|
Save & Share
