Another Virus - Bagle BC

[MovedGoalPosts]

Latest warning from my A/V provider, www.Pandasoftware.com

Bagle.BC spreads rapidly via email. The messages carrying this worm have the following characteristics:
Subject: (any of the following):
Re:
Re:Hello
Re:Hi
Re:Thank you!
Re:Thanks
Message: ÃÃâ€*’³ )
Attachments (any of the following):
Joke
Price
price
The extension of these files can be: com, cpl, exe orscr.
What's more, Bagle.BC spoofs the address of the sender of the email message that causes the infection.

In order to ensure that it is always present on computers, Bagle.BC creates three copies of itself called wingo.exe, wingo.exeopen and wingo.exeopenopen, and inserts an entry in the Windows Registry to ensure it is run whenever the computer is started up.

Apparently this is spreading quite fast. As ever keep your A/V up to date.

[bopdude]

Thanks for the heads up MGP updating as we speak ..lol

[Dave Stones]

Originally Posted by BitDefender

Bucharest, 29.10.2004 A new variant of the Bagle strain was detected today by BitDefender Labs and is spreading fast, having been reported in numerous instances in the wild. Bagle.AX is a classical mass mailer, in no way dissimilar to its predecessors. It obviously spreads by e-mail, but also copies itself into shared folders, under various appetizing names like "Serials.txt.exe"

The virus has a backdoor component, which presumably listens for commands from its creators and uses a simple trick to create copies of itself that are of variable length, making it harder to filter out of e-mails.

When asked to comment on the apparent success the new virus has had, BitDefender CTO Bogdan Dumitru declared: "At this time, I can think of no reason other than deft initial seeding. The author, or authors, must have had a list of vulnerable machines at hand."

BitDefender labs have been detecting this virus since it first appeared last night, under the name of Win32.Bagle.10.Gen@mm. A specific signature update has been issued, and a free removal tool is also available on the BitDefender website. A full technical description can be found here.

some more useless information on it, as ever the "click here" link at the end has masses of info on what it is doing...

[MovedGoalPosts]

Originally Posted by bopdude

Thanks for the heads up MGP updating as we speak ..lol

That of course assumes your A/V supplier is on the ball and has issued an update

Originally Posted by MovedGoalPosts

That of course assumes your A/V supplier is on the ball and has issued an update

thanks for the info, MGP - my AV says it was updated 25 minutes ago