This worm spreads via the Internet as an attachment to infected messages. It sends itself to email addresses harvested from the victim machine.The worm is also able to download other files from the Internet without the user's knowledge or consent. ... [More]

This new member of the Bagle family closely resembles it's predecessor, Bagle.s. Infected emails also have empty subjects and message bodies.In Bagle.t the attachment is 8208 bytes in size. Bagle.t is compressed by FSG and the unpacked file is about... [More]

Bagle.i is 12288 bytes in size, packed using UPX. The unpacked file is 49152 bytes in size.Like previous versions of Bagle, Bagle.i sometimes sends copies of itself in password protected ZIP format. In this case, the password is included in the body... [More]

This worm spreads via the Internet as a file attached to infected messages. It also spreads via file-sharing networks.The worm is a PE EXE file of approximately 21KB, packed using PEX. The unpacked file is approximately 35KB in size.The worm also se... [More]

This worm spreads via the Internet as an attachment to infected messages, and also via file sharing networks. It is packed using UPX; the size of the compressed file is 12843 bytes, and the size of the uncompressed file is 49707 bytes. The worm may ... [More]

This worm spreads via the Internet as an attachment to infected messages, and also via filesharing networks. It is packed using PEX; the size of the packed file is 22815 bytes, and the size of the unpacked files is 36629 bytes. However, the worm may... [More]

This version of Bagle is unable to propagate by itself. However, all other functions are the same as other worms from the Bagle family. According to Kaspersky Labs' classification, this worm is the 'intended' version.This worm is almost identical ... [More]

This worm spreads throughout the Internet via carrier email and file-sharing networks. The carrier email does not contain the worm itself, but a script Trojan which downloads the worm from the Internet. The worm is coded to infect executable files.T... [More]

This file is a polymorphic dropper, which sends infected messages and infected files. The encryption algorithm used means that the size of the file varies. Characteristics of infected messages: Sender's address (chosen at random from the list below... [More]

This worm is practically identical to I-Worm.Bagle.p; it differs in that a different algorithm is used to encrypt the worm's code. ... [More]