Kaspersky upgrades I-Worm.Bagle threat to severe.I-Worm.Bagle, is a new Internet See Web 2.0 and Internet2. worm detected in the wild. The worm spreads via email with a random sender address. Kaspersky Labs Kaspersky Lab is a computer security company, co-founded by Natalia Kaspersky and Eugene Kaspersky in 1997, offering antivirus, anti-spyware, anti-spam, and anti-intrusion products. has received reports of infections from around the world; where Bagle is causing a significant outbreak. The worm is a Windows EXE file (EXEcutable file) Pronounced "ex-ee file." The name given to a program in machine language that is ready to run in DOS, Windows, OS/2 and VMS. The name comes from the .EXE extension at the end of the program name; for example: XYZ.EXE. about 15 KB in size attached to emails with random sender addresses. The subject, "Hi", body, "Test =)" and signature "Test, yep" are constant, whereas the name of the attachment is random. Once the worm is launched, it copies itself into the Windows directory and attempts to download and launch Mitglieder, a Trojan proxy server Also called a "proxy," it is a computer system or router that breaks the connection between sender and receiver. Functioning as a relay between client and server, proxy servers are used to help prevent an attacker from invading the private network. , on the infected machine. This proxy server allows the 'master' to use the infected machine as a platform to send more copies of the malicious code. Currently, all links to Internet sources for downloading Mitglieder are deleted. Thus, I-Worm.Bagle cannot use this tech to increase propagation speed. As a result, at this time, I-Worm.Bagle is using a technique standard for Trojan programs. Bagle scans the file system on infected machines for files with extensions web, txt, htm and rl. The worm then sends copies of itself to all email addresses that it uncovers, using a built in SMTP (Simple Mail Transfer Protocol) The standard e-mail protocol on the Internet and part of the TCP/IP protocol suite, as defined by IETF RFC 2821. SMTP defines the message format and the message transfer agent (MTA), which stores and forwards the mail. server www.kaspersky.com |
|
||||||||||||||
Printer friendly
Cite/link
Email
Feedback
Reader Opinion