Sophos

W32/Bagle-KG

Aliases
  • W32.Beagle.FD@mm
  • Email-Worm.Win32.Bagle.gk
Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Email attachments
Affected operating systems Windows
Protection available since 19 June 2006 00:25:58 (GMT)
Detected by All Sophos products
  • Endpoint Security and Control 9.0
  • Small business solutions 4.0

Action

More Information

W32/Bagle-KG is a mass-mailing worm for the Windows platform.

W32/Bagle-KG includes functionality to access the internet and communicate with a remote server via HTTP.

When W32/Bagle-KG is installed it attempts to mail a zipped file of the W32/Bagle-KF worm. W32/Bagle-KG is a mass-mailing worm for the Windows platform.

W32/Bagle-KG includes functionality to access the internet and communicate with a remote server via HTTP.

When W32/Bagle-KG is installed the worm attempts to email an attachment of a zipped file containing the W32/Bagle-KF worm.

W32/Bagle-KG may create the file C:\WINDOWS\elist.xpt. This file can be deleted.

Registry entries may also be created under:

HKCU\Software\FirstRun648

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer