

| Subject: | NVC-A Heads-up on a virus: W32/Bagle-mm |
| From: | Bob Stevens |
| Date: | Mon, 19 Jan 2004 10:23:37 -0700 |
Hoping this is useful, helpful.
Bob Stevens
Subject: MessageLabs Intelligence virus alert: W32/Bagle-mm, HIGH LEVEL
W32/Bagle-mm spreading rapidly
During 18th and 19th January 2004, MessageLabs, the email security
company, intercepted a significant number of copies of a new virus known
as W32/Bagle-mm. The majority of intercepted copies have been sent from
Australia.
Name: W32/Bagle-mm
Number of copies intercepted so far: 45,000
Time & Date first Captured: 18th Jan 2004, 11.36 GMT
Origin of first intercepted copy: Germany
General
The worm arrives as an attachment to an email and has a random filename,
with a .exe extension.
W32/Bagle-mm searches the infected machine for email addresses and then
uses its own SMTP engine to send itself to the addresses found.
Email Characteristics
Subject: Hi
Text: Test =)
<random chars>
--
Test, yep.
Attachment: <Random characters>.exe
Size: 15 kilobytes
Detection
MessageLabs detected this virus proactively, using its unique and
patented SkepticT predictive heuristics technology.
For further information, please visit the MessageLabs website at:
www.messagelabs.com/viruseyeHave something to add on this topic today? Revive this thread in the forum »