[unisog] New Beagle/Bagle Variant Making The E-mail Rounds
eckman at umn.edu
Mon Aug 9 19:33:51 GMT 2004
We started seeing a new variant of the Bagle (a.k.a. Beagle) line of
E-mail worm at 11:30 CDT (GMT -0500). The infection rate worldwide has
since increased significantly. AntiVirus vendors and the SANS Internet
Storm Center have been sent copies. SANS has a preliminary writeup on
their Web page at http://isc.sans.org/ that they have been updating.
AV vendors are not detecting this new variant of Bagle yet. Apparently
file that runs the Bagle executable. This variant opens a backdoor on
It creates several files, including:
Several campuses have reported infections thus far.
OIT Security and Assurance
University of Minnesota
More information about the unisog