Full
Name: |
W32/Bagle.gen |
| Type: |
Worm |
| Also Known As: |
Win32.Mitglieder.CT [Computer Associates],Trojan-Proxy.Win32.Mitglieder.dl [Kaspersky Lab],Trojan.Mitglieder.Q [Symantec]. |
| Danger Level: |
7 |
| Category Description: |
Virus-like program that spreads automatically to other computers by sending itself out by email or by any other means. A program that propagates itself by attacking other machines and copying itself to the affected machine.
Worms have self-replicating code that travels from machine to machine by various means. A worms first objective is merely propagation. Worms can be destructive depending on what payload they have been given. Worms may replace files, but do not insert themselves into files. |
| Comment: |
This worm opens a backdoor on TCP port 23422.It Connects to many web sites and sends system Info to them.It downloads Block_list.txt from the website and drops it under the system folder.It disables Windows Firewall on Winxp-Sp2 machine. |
| |
|
| Properties: |
|
| Manual Removal: |
Enable Windows Firewall.
1.Click start and then select Control Pannel.
2.Click to Open Security centre.
3.please ensure that Firewall Security esential is on.
4.If not then under recomandation turn it on.
5.Click ok on the dilouge Box and then close the security centre.
6.Please Run a scan using XCleaner. |
