November 2, 2004

Virus Alert!

Here is some info about a new computer virus [Thanks eWeek!]

Two new versions of the venerable Bagle worm are on the loose, infecting PCs and opening backdoors as they go.

The pair are virtually indistinguishable from one another and also are quite similar to most of the other Bagle variants. The main area of concern for enterprises is the fact that both Bagle.BC and Bagle.BD open a backdoor on TCP Port 81 on infected PCs. Both versions were discovered early Friday morning.

Bagle's success puzzles virus researchers. Read about it here.

Both variants are capable of spreading through peer-to-peer networks, as well as via e-mail. Both arrive in e-mail messages with spoofed sending addresses and one of a handful of meaningless subject lines, such as "Re:" "Re: Hello" or "Re: Thank you." The bodies of both variants contain just a single emoticon, and the name of the virus-infected attachment is either "Price," "price" or "Joke."

Go here for the rest from eWeek!