Thread
:
Another Virus - Bagle BC
View Single Post
29-10-2004, 17:33
#
1
MovedGoalPosts
Inactive
Join Date: Jun 2003
Location: 127.0.0.1
Age: 62
Posts: 15,868
Another Virus - Bagle BC
Latest warning from my A/V provider,
www.Pandasoftware.com
Quote:
Bagle.BC spreads rapidly via email. The messages carrying this worm have the following characteristics:
Subject: (any of the following):
Re:
Re:Hello
Re:Hi
Re:Thank you!
Re:Thanks
Message:
ÃÃâ€*’³
)
Attachments (any of the following):
Joke
Price
price
The extension of these files can be: com, cpl, exe orscr.
What's more, Bagle.BC spoofs the address of the sender of the email message that causes the infection.
In order to ensure that it is always present on computers, Bagle.BC creates three copies of itself called wingo.exe, wingo.exeopen and wingo.exeopenopen, and inserts an entry in the Windows Registry to ensure it is run whenever the computer is started up.
Apparently this is spreading quite fast. As ever keep your A/V up to date.
MovedGoalPosts
View Public Profile
Visit MovedGoalPosts's homepage!
Find More Posts by MovedGoalPosts