Home of the World Famous VIRUS BUSTERS
Download Antivirus Software
What to Do If You Have a Virus
Virus Filtering
Viruses Seen at U-M
Hoaxes, Hooey, and Hogwash
Urban Legends
U-M Resources
Other Resources
Contact Us
We Ain't 'Fraid O' No Virus!

Bagle.bb and Bagle.bd Spreading Rapidly

Summary

  • Virus/Worm/Trojan Name: Bagle.bb & Bagle.bd
  • Discovered: 10/29/04
  • Protective filters installed on the U-M e-mail gateway: Yes. Installed as of 10:35 a.m., 10/29/04.
  • Affected systems: Windows computers only, although users of other systems may see messages sent by the virus.
  • This page last updated: 10/29/04 11:20 a.m.

How these Viruses Spread

These viruses spread via infected e-mail attachments. They then use their own SMTP engines to send outgoing, infected messages.

What You Are Likely to See

(This information is copied from the McAfee's bagle.bb page. and McAfee's bagle.bd page.)

Messages with attachments infected with the Bagle.bb virus typically have these characteristics:

The From: address is spoofed.

Subject: The subject line is one of the following:

  • Re:
  • Re: Hello
  • Re: Thank you!
  • Re: Thanks :)
  • Re: Hi

Message Body: The message body will be one of the following:

  • :)
  • :))

Attachment: The attachment is an executable of name:

  • Price
  • price
  • Joke

with one of the following extensions:

  • .exe
  • .scr
  • .com
  • .cpl

Symptoms of Infection

See these McAfee pages for details. (McAfee is our antivirus software vendor.)

What to Do If Your Computer Is Infected

See these McAfee pages for details.

For More Information

See these McAfee pages for details.

This information can be freely reproduced in any medium as long as the information is unmodified.  

U-M Virus Busters

virus.busters@umich.edu

ITCS | University of Michigan
Copyright © 1996-2005 The Regents of The University of Michigan

visits since this site was redesigned 5/21/04

This page last updated October 29, 2004