Contains signature of the worm Worm/Bagle.af

TheBramble

Legendary member
8,395 1,171
I have AntiVir running on all my machines, but for some reason, the above nastie is (presumably) on one machine and sending emails to other accounts which contain a ZIP file which has the above inside.

AntiVir is identifying the fact that the virus exists within the ZIP, but doesn't seem able to stop the infected m/c sending infected emails.

Having said that, maybe it's something at the ISP end as the machine that has allegedly sent the email, wasn't even on at the time the email was sent.

Anyone able to get their head round this?
 

JonnyT

Senior member
2,560 22
I would run Stinger on all your machines.

The infected machine may not be the one you think it is.

JonnyT
 

MysticalTrader

Active member
165 1
I have Avast4 running on mine and been very happy with it. It finds things that many other virus/trojan/worm scanners dont seem to find, and can delete some where others just wont go...


MT

TheBramble said:
I have AntiVir running on all my machines, but for some reason, the above nastie is (presumably) on one machine and sending emails to other accounts which contain a ZIP file which has the above inside.

AntiVir is identifying the fact that the virus exists within the ZIP, but doesn't seem able to stop the infected m/c sending infected emails.

Having said that, maybe it's something at the ISP end as the machine that has allegedly sent the email, wasn't even on at the time the email was sent.

Anyone able to get their head round this?
 

oatman

Senior member
2,879 22
Delete it. Is the email supposedly from you? It could be someone else infected sending to all addresses in their book including you. Are all your machines firewalled, AVd etc?

try this http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=59265
Disable System Restore if you're on XP or ME

info on your wriggly friend :cheesy:
http://uk.trendmicro-europe.com/enterprise/security_info/ve_detail.php?Vname=WORM_BAGLE.AF
 
Last edited:
 
AdBlock Detected

We get it, advertisements are annoying!

But it's thanks to our sponsors that access to Trade2Win remains free for all. By viewing our ads you help us pay our bills, so please support the site and disable your AdBlocker.

I've Disabled AdBlock