ISP Guide

Re: I think I have the W32/Bagle.z@MM virus - bagle virus

Anonymous — Tue Jul 20, 2004 3:10 pm

Author: Anonymous

Posted: Tue Jul 20, 2004 3:10 pm

John wrote:

I think i have this virus because i have been hearing about it in the news. But what are teh characteristics of this bagle virus.

Worm Bagle.Z virus removal tools

justin — Wed Jul 07, 2004 1:43 pm

Author: justin

Posted: Wed Jul 07, 2004 1:43 pm

W32/Bagle.Z@MM, WORM_Bagle.X, W32.Beagle.W@mm, W32/Bagle.W@mm, WORM_Bagle.AA, WORM _Bagle.X, WORM _Bagle.Y, WORM _Bagle.Z all are the same virus threats.

for more inforamtion click on following links:

http://www.f-secure.com/v-descs/bagle_z.shtml
http://www.pspl.com/virus_info/worms/baglez.htm

Please download the virus removel tools from www.pspl.com, www.symantec.com, www.grisoft.com, www.mcafee.com, www.f-secure.com etc have it s own virus removal utility that may useful to you while removing the virus.

Re: I think I have the W32/Bagle.z@MM virus - bagle virus

stella — Wed Jul 07, 2004 1:33 pm

Author: stella

Posted: Wed Jul 07, 2004 1:33 pm

W32/Bagle.Z is a mass mailing worm. The worm will infect Windows systems. It affects on the .exe files that are stored on your computer's system.

Windows Sourcecode update.doc.exe,Windown Longhorn Beta Leak.exe
WinAmp 6 New!.exe,WinAmp 5 Pro Keygen Crack Update.exe,
Serials.txt.exe,Porno, sex, oral, anal cool, awesome!!.exe,Porno pics arhive, xxx.exe,Porno Screensaver.scr,Opera 8 New!.exe
Microsoft Windows XP, WinXP Crack, working Keygen.exe
Microsoft Office XP working Crack, Keygen.exe,Microsoft Office 2003 Crack, Working!.exe,Kaspersky Antivirus 5.0,KAV 5.0

The worm opens port 2535 to allow access to the infected system.
It alters the windows registry at the following location to load itself during next startup;

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

To propagate itself, the worm scans the infected machine for the files having the following extensions and collects all the available email addresses;
.xml .xls .wsh .wab .uin .txt .tbb .stm .shtm .sht .pl .php .oft .ods .nch .msg .mmf .mht .mdx .mbx .jsp,.htm .eml .dhtm .dbx .cgi .cfg .asp

Re: I think I have the W32/Bagle.z@MM virus - bagle virus

Tod — Sat Jun 19, 2004 1:03 pm

Author: Tod

Posted: Sat Jun 19, 2004 1:03 pm

Hi,
I think that that the W32/Bagle.Z@MM virus send emails with attachments to the user . The virus opens port 2535 on the infected machine.It mainly affects the shared files stores on your machine. It also known as WORM_Bagle.X, W32.Beagle.W@mm, W32/Bagle.W@mm and W32/Bagle.Z Worm.

To protect your machine. Take latest update of virus definitions on your computer. If your computer is virus affected then visit www.pspl.com, www.symantec.com for virus removal utility.

It makes your system free from virus.

bagle virus info

Anonymous — Fri Jun 18, 2004 11:52 pm

Author: Anonymous

Posted: Fri Jun 18, 2004 11:52 pm

I went to mcafee and found the following info hope this helps:

This is a mass-mailing worm with the following characteristics:

contains its own SMTP engine to construct outgoing messages
harvests email addresses from the victim machine
the From: address of messages is spoofed
attachment can be a password-protected zip file, with the password included in the message body.
contains a remote access component (notification is sent to hacker)
copies itself to folders that have the phrase shar in the name (such as common peer-to-peer applications; KaZaa, Bearshare, Limewire, etc)

I think I have the W32/Bagle.z@MM virus - bagle virus

Anonymous — Fri Jun 18, 2004 11:49 pm

Author: Anonymous

Posted: Fri Jun 18, 2004 11:49 pm

I think i have this virus because i have been hearing about it in the news. But what are teh characteristics of this bagle virus.