contents

software
 
ESET's NOD32 Detects Two New Rapidly Spreading Bagle Worms

ESET has warned customers of two new Bagle virus variants proliferating via the Internet that can cause significant computer damage. ESET noted a Bagle variant, Win32/Bagle.FA, on February 3, and it spread rapidly yesterday during the Superbowl football game, along with a slightly older variant, Win32/Bagle.EZ. ESET Threat Labs have determined that the variants disable antivirus programs and modify the system's hosts file so they cannot be updated.

The new Bagles are "Trojan downloaders, " which install malicious files from an Internet location to create a backdoor into a machine, surpassing other computer defenses. Once the backdoor is installed, user systems are left unprotected to new viruses, since virus signatures are not updated properly.

To identify suspect emails, IT administrators should look for emails where either the subject line and body lines may contain the text:
- Price
- February price,

and the attachments may be .zip files with any of the following names:
- price
- pricelst
- pricelist
- price_lst
- new_price
- February_price
- 21_price.

As well as offering a free remover for any systems infected by these worms ESET offers a free 30-day trial of its proactive antivirus software, NOD32, which can be downloaded from the website athttp://www.eset.com/download/
The remover can be downloaded athttp://www.eset.com

ESET's Virus Radar (www.virusradar.com), a real-time malware tracking tool, identified the new Bagle variants using its flagship NOD32 Anti-Virus System. Virus Radar provides site visitors with easy access to in-depth analysis of the latest malicious outbreaks and processes approximately four million email messages per day to provide information such as the exact date a virus was first detected and its current detection rate. Virus Radar is also capable of tracking the progression of a single virus over a given period - in some instances from the earliest heuristic detection of a new virus to the point where the virus disappears.



write your comments about the article :: © 2006 Computing News :: home page