Worm.Bagle - Spyware Detector - Max Secure Software

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home/ Spyware Encyclopedia / Worm.Bagle

Worm.Bagle Technical Details

Category

Worm

Discovered

8/7/2006 8:05:00 PM

Modified

12/3/2007 12:43:00 PM

Threat Level

Medium

Description

A Worm is a malicious program that spreads itself without any user intervention. Worms are self-replicating. Worms spread without attaching to or infecting other programs and files. A Worm can spread across computer networks via security holes on vulnerable machines connected to the network. Worms can also spread through email by sending copies of itself to everyone in the user's address book A Worm may consume a large amount of system resources and cause the machine to become noticeably sluggish and unreliable

Summary

N/A

When the Worm is executed, it creates the following files:

Name	Version	Publisher	Signature (MD5)	File Size (in KB)
..\3ba26f04.exe	1.0.0.1		39e6148fd3e472bc224430eaa498838b	410212
..\anti_troj.exe			7a7f3dd56fbd01f7618421fe7c9de1ce
..\auhook.dll			7b3cd2bbf73f770c206c58e84209df3e	84968
..\887395\ntdll32.dll	1.0.0.1	microsoft corporation	6a9e584c5f152d2bbb8d660bedc5bbad	414208
..\drivers\hidr.exe			1dc616fefb0161edb8ed59c1ba989e1f	694422
..\drivers\srosa.sys			dd63934c92cc36e13ab95f3c732e97f9
..\edlm.exe			8fe5fb8cf10da204d2cbd3a3e7e3ee48
..\eml.exe			0de80e2361bb927e0421f3474683dbc6	640
..\exefld\1053046.exe			6b9cf0cc978109f673c62c7dcaf70458	551428
..\exefld\1056484.exe			6b9cf0cc978109f673c62c7dcaf70458	551428
..\exefld\1076140.exe			6b9cf0cc978109f673c62c7dcaf70458	551428
..\exefld\1262234.exe			cbb83d59ced6f6072e8b86a3b3fb7ccb	472656
..\exefld\1316609.exe			6b9cf0cc978109f673c62c7dcaf70458	551428
..\exefld\1328718.exe			99e5326dbd402f6e52980a9fdbda00d9	82978
..\exefld\1350328.exe			43d39034113d41074679ebb7abdd1679	511412
..\exefld\1384359.exe			9e02d6c678eac8e994a95cdb41d27619	83460
..\exefld\139187.exe			b145d93135d2d3d1179d8a9c93d755d7	486400
..\exefld\1505312.exe			6b9cf0cc978109f673c62c7dcaf70458	551428
..\exefld\1560546.exe			6b9cf0cc978109f673c62c7dcaf70458	551428
..\exefld\1597859.exe			43d39034113d41074679ebb7abdd1679	511412
..\exefld\1603718.exe			99e5326dbd402f6e52980a9fdbda00d9	82978
..\exefld\1604625.exe			99e5326dbd402f6e52980a9fdbda00d9	82978
..\exefld\1643640.exe			99e5326dbd402f6e52980a9fdbda00d9	82978
..\exefld\1972906.exe			04a329ad0a54a44b0f94056751ac93bb	528384
..\exefld\217015.exe			6b9cf0cc978109f673c62c7dcaf70458	551428

When the Worm is executed, it creates the following Registry entries:

•	..\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\reset6
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"firewall_anti"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"key2"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"mule_st_key"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"mule_st_key"\"%das.au.app data%\m\flec006.exe"
•	..\Software\firstrrrun
•	..\Software\Microsoft\Windows\CurrentVersion\r1un
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"drvsyskit"
•	..\Software\Timeout
•	..\Software\winword
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"anti_troj"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"dsplobjects"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"hldrrr"\"%win.sys32%\hldrrr.exe"
•	..\System\CurrentControlSet\Services\m_hook
•	..\Software\firstruxzx
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"drv_st_key"\"%das.au.app data%\hidn\hidn1.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"lsamanager"
•	..\Software\muleappdata
•	..\Software\winexe
•	..\System\CurrentControlSet\Services\rosa

Recommendation to remove Worm.Bagle

Spyware Detector can remove Worm.Bagle, and thousands of other Spyware automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.

	Speed up your computer and increase browsing performance by deleting Spyware & Adware

	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.

	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Search Threats

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat