본문 바로가기

Programming/보안

W32.Beagle.AV@mm

Discovered: October 29, 2004
Updated: February 13, 2007 12:29:18 PM
Also Known As: Win32.Bagle.AQ [Computer Assoc, W32/Bagle.BC.worm [Panda], WORM_BAGLE.AT [Trend Micro], Bagle.AT [F-Secure], W32/Bagle.bb@mm [McAfee], W32/Bagle-AU [Sophos], I-Worm.Bagle.at [Kaspersky], W32/Bagle.AQ@mm [Norman]
Type: Worm
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

W32.Beagle.AV@mm is a mass-mailing worm that also spreads through file-sharing networks. The worm will open a backdoor on TCP port 81.

Note: LiveUpdate definitions with sequence number 37860 or greater will detect this threat.


Protection

  • Initial Rapid Release version October 29, 2004
  • Latest Rapid Release version October 29, 2004
  • Initial Daily Certified version October 29, 2004
  • Latest Daily Certified version October 29, 2004
  • Initial Weekly Certified release date October 29, 2004

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: More than 1000
  • Number of Sites: More than 10
  • Geographical Distribution: Medium
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: High
Writeup By: John Canavan