Sophos

Troj/Baglet-D

Aliases
  • SpamTool.Win32.Small.p
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Protection available since 5 July 2005 00:51:15 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Baglet-D is an email address harvesting Trojan for the Windows platform.

Troj/Baglet-D then sends the addresses it finds to a preconfigured internet location. Troj/Baglet-D is an email address harvesting Trojan for the Windows platform.

Troj/Baglet-D scans all drives for file with one of the following extensions and extracts email addresses from them:

wab
txt
msg
htm
shtm
stm
xml
dbx
mbx
mdx
eml
nch
mmf
ods
cfg
asp
php
pl
wsh
adb
tbb
sht
xls
oft
uin
cgi
mht
dhtm
jsp

Troj/Baglet-D then sends the addresses it finds to a preconfigured internet location.

Troj/Baglet-D may store information under the following registry entry:

HKCU\Software\zseewr

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer