Maleficent2
DIS Legend
- Joined
- Sep 15, 1999
- Messages
- 15,453
As of October 29, 2004 9:40 AM (GMT -7:00; Daylight Saving Time), TrendLabs has declared a Medium Risk Virus Alert to control the spread of WORM_BAGLE.AU. TrendLabs has received several infection reports indicating that this malware is spreading in US, Japan, Sweden, Germany, Mexico, France, Argentina, Chile, Brazil, and Canada.
Like other BAGLE variants, the success of this worm may be attributed to its plain and brief email messages that bear the following details:
From:<spoofed>
Subject any of the following
. Re:
. Re: Hello
. Re: Hi
. Re: Thank you!
. Re: Thanks
Message body: any of the following
.
.)
Attachment:
any of the following
. PRICE
. JOKE
with the following extension names
. COM
. CPL
. EXE
. SCR
This worm uses its own SMTP engine to propagate via email. It arrives as either of the following attachments:
. PRICE.CPL
. PRICE.COM
. PRICE.EXE
. PRICE.SCR
. JOKE.CPL
. JOKE.COM
. JOKE.EXE
This worm searches the drive for folders with names containing the string "shared". It then drops itself in these shared folders using certain file names.
Mal
Like other BAGLE variants, the success of this worm may be attributed to its plain and brief email messages that bear the following details:
From:<spoofed>
Subject any of the following
. Re:
. Re: Hello
. Re: Hi
. Re: Thank you!
. Re: Thanks
Message body: any of the following
.
.
) Attachment:
any of the following
. PRICE
. JOKE
with the following extension names
. COM
. CPL
. EXE
. SCR
This worm uses its own SMTP engine to propagate via email. It arrives as either of the following attachments:
. PRICE.CPL
. PRICE.COM
. PRICE.EXE
. PRICE.SCR
. JOKE.CPL
. JOKE.COM
. JOKE.EXE
This worm searches the drive for folders with names containing the string "shared". It then drops itself in these shared folders using certain file names.
Mal
