[Full-Disclosure] News from Bagle worm

2004-01-26 Thread Papp Geza
Hy, News from :Win32/Bagle.A Own experiences: The worm is launched, it copies itself into the Windows directory and attempts to download and launch Mitglieder, a Trojan proxy server, on the infected machine. This proxy server allows the 'master' to use the infected machine as a platform to send

Re: [Full-Disclosure] News from Bagle worm

2004-01-26 Thread Joe Stewart
As much as I hate to give this worm any more attention (as it is already way overblown as a threat) I feel the need to point out some inaccuracies here. Comments inline below. On Monday 26 January 2004 6:29 am, Papp Geza wrote: The worm is launched, it copies itself into the Windows directory