I think I have the W32/Bagle.z@MM virus - bagle virus

[John]

I think i have this virus because i have been hearing about it in the news. But what are teh characteristics of this bagle virus.

[Bob2002]

I went to mcafee and found the following info hope this helps:

This is a mass-mailing worm with the following characteristics:

contains its own SMTP engine to construct outgoing messages
harvests email addresses from the victim machine
the From: address of messages is spoofed
attachment can be a password-protected zip file, with the password included in the message body.
contains a remote access component (notification is sent to hacker)
copies itself to folders that have the phrase shar in the name (such as common peer-to-peer applications; KaZaa, Bearshare, Limewire, etc)

[Tod]

Hi,
I think that that the W32/Bagle.Z@MM virus send emails with attachments to the user . The virus opens port 2535 on the infected machine.It mainly affects the shared files stores on your machine. It also known as WORM_Bagle.X, W32.Beagle.W@mm, W32/Bagle.W@mm and W32/Bagle.Z Worm.

To protect your machine. Take latest update of virus definitions on your computer. If your computer is virus affected then visit www.pspl.com, www.symantec.com for virus removal utility.

It makes your system free from virus.

[stella]

W32/Bagle.Z is a mass mailing worm. The worm will infect Windows systems. It affects on the .exe files that are stored on your computer's system.

Windows Sourcecode update.doc.exe,Windown Longhorn Beta Leak.exe
WinAmp 6 New!.exe,WinAmp 5 Pro Keygen Crack Update.exe,
Serials.txt.exe,Porno, banned, oral, banned cool, awesome!!.exe,Porno pics arhive, xxx.exe,Porno Screensaver.scr,Opera 8 New!.exe
Microsoft Windows XP, WinXP Crack, working Keygen.exe
Microsoft Office XP working Crack, Keygen.exe,Microsoft Office 2003 Crack, Working!.exe,Kaspersky Antivirus 5.0,KAV 5.0

The worm opens port 2535 to allow access to the infected system.
It alters the windows registry at the following location to load itself during next startup;

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

To propagate itself, the worm scans the infected machine for the files having the following extensions and collects all the available email addresses;
.xml .xls .wsh .wab .uin .txt .tbb .stm .shtm .sht .pl .php .oft .ods .nch .msg .mmf .mht .mdx .mbx .jsp,.htm .eml .dhtm .dbx .cgi .cfg .asp

[justin]

W32/Bagle.Z@MM, WORM_Bagle.X, W32.Beagle.W@mm, W32/Bagle.W@mm, WORM_Bagle.AA, WORM _Bagle.X, WORM _Bagle.Y, WORM _Bagle.Z all are the same virus threats.

for more inforamtion click on following links:

http://www.f-secure.com/v-descs/bagle_z.shtml
http://www.pspl.com/virus_info/worms/baglez.htm

Please download the virus removel tools from www.pspl.com, www.symantec.com, www.grisoft.com, www.mcafee.com, www.f-secure.com etc have it s own virus removal utility that may useful to you while removing the virus.

[TITO]