The Bagle Virus Continues

The Bagle Virus Continues

Bagle.AX and Bagle.AY, the two latest versions of Bagle, were among the top 10 malicious programs in 2004, appearing and spreading on the Internet.

This is the 50th and 51st variants of the worm that came out in January 2004. Just like the original (sometimes called the Beagle), these two "descendants" lurk in the executable file and spread to Windows PCs via e-mail and file-sharing systems. peer-to-peer network

Once the user downloads the file and activates, their computer will immediately be infected. Once you've located the & quot; hide & quot; The virus starts to collect e-mail addresses in the victim's computer and automatically sends e-mail to these addresses, of course, with files containing their copy. Viruses sent out are often referred to as "Delivery service mail", "Registration is accepted", and "You are made active" ... the virus attachments are usually named "Jol03", "upd02", " zupd02 "... with extensions like .exe, .scr, .com and .cpl.

On computers using peer-to-peer file sharing software, viruses replicate themselves in folders named "shar", which may be shared files, which are used. to exchange files on the network. In this format, the file containing the virus is often associated with common software or pornography, such as "Adobe Photoshop 9 full.exe" or "XXX hardcore images.exe".

Security companies have announced a software update that spans two new variants and encourages customers to update as soon as possible.

Yesterday, another computer worm called Forbot appeared and attacked computers running MySQL database management software. . This virus has successfully infiltrated about 8,000 systems by hijacking administrators for non-password or weak accounts. Forbot's method is to try about 1,000 common passwords that are already in the database