Malware type: Worm

Aliases: Email-Worm.Win32.Bagle.t (Kaspersky), W32/Bagle.u@MM (McAfee), W32.Beagle.V@mm (Symantec), Worm/Bagle.U.2 (Avira), W32/Bagle-V (Sophos),

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 95, 98, ME, NT, 2000, XP

Encrypted: No

Description: 

This worm propagates via email. It sends copies of itself to addresses that it gathers from files with certain extension names. The email that it sends out has the following details:

Subject: <None>
Message Body: <None>
Attachment: Game.exe

This worm has backdoor capabilities. It listens to TCP port 4751 to wait for instructions from a remote user.

It arrives as an FSG-compressed file and runs on Windows 95, 98, ME, NT, 2000, and XP. It drops a copy that uses the following icon:

For additional information about this threat, see:
Solution
Technical Details

Description created: Mar. 28, 2004 11:47:42 PM GMT -0800
Description updated: Mar. 29, 2004 4:22:20 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.