Kaspersky upgrades I-Worm.Bagle threat to severe.

Position::Virus Notes

I-Worm.Bagle, is a new Internet worm detected in the wild. The worm spreads via email with a random sender address. Kaspersky Labs has received reports of infections from around the world; where Bagle is causing a significant outbreak. The worm is a Windows EXE file about 15 KB in size attached to emails with random sender addresses. The subject, "Hi", body, "Test =)" and signature "Test, yep" are constant, whereas the name of the attachment is random.

Once the worm is launched, it copies itself into the Windows directory and attempts to download and launch Mitglieder, a Trojan proxy server, on the infected machine. This proxy server allows the 'master' to use the infected machine as a platform to send more...

To continue reading