Skip to main content
Gerry | Vanagon
Checking account...
← vanagon.com home · Continue the discussion in the forum
VanagonEuroVan
Subject:NVC-A Heads-up on a virus: W32/Bagle-mm
From:Bob Stevens
Date:Mon, 19 Jan 2004 10:23:37 -0700

Hoping this is useful, helpful.

Bob Stevens

Subject: MessageLabs Intelligence virus alert: W32/Bagle-mm, HIGH LEVEL
W32/Bagle-mm spreading rapidly
During 18th and 19th January 2004, MessageLabs, the email security
company, intercepted a significant number of copies of a new virus known
as W32/Bagle-mm. The majority of intercepted copies have been sent from
Australia.

Name:  W32/Bagle-mm
Number of copies intercepted so far: 45,000
Time & Date first Captured: 18th Jan 2004, 11.36 GMT
Origin of first intercepted copy: Germany
General
The worm arrives as an attachment to an email and has a random filename,
with a .exe extension.

W32/Bagle-mm searches the infected machine for email addresses and then
uses its own SMTP engine to send itself to the addresses found.

Email Characteristics
Subject: Hi
Text: Test =)
    <random chars>
    --
    Test, yep.

Attachment: <Random characters>.exe
Size: 15 kilobytes

Detection

MessageLabs detected this virus proactively, using its unique and
patented SkepticT predictive heuristics technology.

For further information, please visit the MessageLabs website at:
www.messagelabs.com/viruseye

Have something to add on this topic today? Revive this thread in the forum »