Summary

Summary
Action
More Information
| How it spreads |
|
|---|---|
| Affected operating systems | Windows |
| Protection available since | 19 June 2006 00:25:58 (GMT) |
| Detected by | All Sophos products |
- Endpoint Security and Control 9.0
- Small business solutions 4.0
Action

Summary
Action
More Information
Please follow the instructions for removing worms.
More Information
W32/Bagle-KG is a mass-mailing worm for the Windows platform.
W32/Bagle-KG includes functionality to access the internet and communicate with a remote server via HTTP.
When W32/Bagle-KG is installed it attempts to mail a zipped file of the W32/Bagle-KF worm. W32/Bagle-KG is a mass-mailing worm for the Windows platform.
W32/Bagle-KG includes functionality to access the internet and communicate with a remote server via HTTP.
When W32/Bagle-KG is installed the worm attempts to email an attachment of a zipped file containing the W32/Bagle-KF worm.
W32/Bagle-KG may create the file C:\WINDOWS\elist.xpt. This file can be deleted.
Registry entries may also be created under:
HKCU\Software\FirstRun648
