If you get infected, don't say I didn't warn you!

VIRUS ADVISORY - W32/Bagle.ad@MM
Date: Tue, 6 Jul 2004

What is it?

W32/Bagle.ad@MM is a Medium Risk mass-mailing worm that, like its predecessor, tries to open a backdoor on an infected PC, giving a hacker remote access to the computer. The worm spreads by emailing itself to contacts it steals and by using popular file-sharing applications such as KaZaa, Bearshare and Limewire. W32/Bagle.ad@MM also attempts to shut down anti-virus and firewall software running on infected machines.

Note: Receiving an email alert stating that the virus came from your email address is not an indication that you are infected -- the virus often spoofs the "from" address.

What should I look for?

FROM: Varies (spoofed).
SUBJECT: Varies (examples, check our site for a full listing): Re: Msg reply, Re: Hello, Re: Yahoo!
BODY: Uses various constructed strings.
ATTACHMENT: Varies. Can be a password-protected zip file, with the password included in the message body (as plaintext or within an image). Examples:
Information, Details, text_document
How do I know if I've been infected?

Port 1234 (TCP) open on your PC. Outgoing messages matching the described characteristics above. Modified System Registry (see our site for details).

Why am I receiving so many alerts?

It's our policy to notify McAfee customers or those who have opted-in to receive alerts of new viruses or variants (e.g., W32/Bagel.aa@MM), which often come in waves, especially as virus writers try to "one up" each other.

How do I find out more?

View details about W32/Bagle.ad@MM here: http://us.mcafee.com/viru...&cid=11226

Run to the hills!

Bring your penicillin too!

I think I might have worms already.

:scratching:

Ewwwww!


I don't know if it's you or the virus makin' me sick...

Maybe it's a conspiracy by record companies to try and wane people off file-sharing.

..and if you're smart you don't have McAfee or Norton AV running. Those have got to be two of the worst virus scanners.

J0eyC0c0 said:

McAfee has been great for me.

June7 said:

Yeah, I thought Norton was great...till I gave another program a try cause some website had used an IE6 vulnerability and dumped a backdoor on my comp and some fool started smapping folks through my connection. NOD32 found a bunch of shit neither Norton nor McAfee found.