New variant of BAGLE virus appears

New variant of BAGLE virus appears

According to security experts, the & nbsp; Viruses of the Bagle (Worm_Bagle.ac). Shortly after this virus appeared, TrendLab security firm listed Bagle.ac as "quite dangerous" and called on the network users to be vigilant.

& nbsp;

& nbsp;

Description of Bagle.ac Virus

& nbsp;

Name: Worm_Bagle.ac

Search &: 9/8/2004

Assessment of danger level: High

Infection rate: High

& nbsp;

Description of behavior, identification signs:

& nbsp; & nbsp; & nbsp; & nbsp; & nbsp; & nbsp; & nbsp; & nbsp;

This is a worm that spreads via email. Worm_Bagle.ac infection and files in the Windows system directory:

• WINDLL.EXE

• WINDLL.EXEOPEN

• WINDLL.EXEOPENOPEN

This worm sends ZIP archives containing Troj_Bagle.ac and HTML_Bagle.ac

Troj_Bagle.ac does the actions specified by HTML_Bagle.ac.

& nbsp;

The emails containing Worm_Bagle.ac should look like this:

& nbsp;

From:

Subject:

Message body: new price

Attachment:

08_price.zip

new__price.zip

new_price.zip

newprice.zip

price.zip

price_08.zip

price_new.zip

price2.zip

& nbsp;

This compression medium infects the & nbsp; Machines running Windows 95, 98, ME, NT, 2000, and XP

& nbsp;

Manual Disposal Solution:

& nbsp;

Use a virus scanner to identify infected Worm_Bagle.AC files

& nbsp;

Open the Windows Task Manager

- On Windows 95/98 / ME, press CTRL + ALT + DELETE

- On Windows NT / 2000 / XP, press CTRL + SHIFT + ESC, then select Processes.

& nbsp; 2. In the list of running applications, identify infected files or suspicious files detected when scanning for viruses

& nbsp; 3. Select one file at a time and select End Task or End Process button. (depending on your version of Windows)

& nbsp; 4. Performs the same action on infected files in the list of running processes.

& nbsp; 5. To check whether the processes caused by the virus have ended, close Task Manager and reopen it for testing.

& nbsp; 6. Close Task Manager.

& nbsp;

1 AzSoft_watermark_big.png AzSoft_watermark_small.png cong-nghe?p=1 des.txt en_metadesc.txt en_name.txt getpageinfo.sh getpagelink.sh imglink.txt imglist.txt img.quantrimang.com label:Some Text link_original.txt link.txt log.txt meta_desc.txt name.txt news t-142619 testimg2-0.jpg testimg2-1.jpg testimg2.jpg testimg3.jpg testimg.jpg thumb tim-hieu-excel-2016-200.jpg title_vn.txt tmp02.html tmp03.html tmp2.html tmpdesc2.txt tmpdesc3.txt tmpdesc4.txt tmpdesc5.txt tmpdesc6.txt tmpdesc7.txt tmpdesc.txt tmp.html tmpresult.txt tmptrans.txt transresult.txt wm.quantrimang.com www.mailenable.com www.microsoft.com Note: For Windows 95/98 / ME, Task Manager may not be able to open processes, you must add the Task Manager component. For machines running Windows XP / ME, disable the System Restore feature.

& nbsp;

Removable Solution using Trend Micro products

& nbsp;

- If you are using a non-networked PC, or just interested in anti-virus for your PC, you can buy PC-Cillin software for $ 69.50.

- If you want anti-virus for all the computers on the LAN, you can buy the software & nbsp; OfficeScan ranges from $ 27.27 to $ 17.73 / PC depending on the number of computers on your LAN.

For details of this service, please visit the page http: ///203.113.130.157/QuickService/index.htm

& nbsp;