Wednesday, March 02, 2005

Another Bagle Virus Appears Via Wave of Spam

What is it?
Mass-spammed over the past 24 hours, W32/Bagle.dldr is a Medium Risk Trojan downloader that tries to:


Open a communication port on your computer
Download a .jpg picture file from various sites
Terminate security services like anti-virus updating


Unlike earlier variants, W32/Bagle.dldr does not appear to mass-mail itself to stolen email contacts.

Note: To fortify your anti-virus defense against threats like W32/Bagle.dldr that need Internet access to spread, we recommend installing McAfee Personal Firewall Plus.



How do I know if I've been infected?

W32/Bagle.dldr copies itself to the Windows\System32 directory as winshost.exe, which VirusScan detects as W32/Bagle.dll.gen.



How do I find out more?

View details about W32/Bagle.dldr here.