or  [EMAIL PROTECTED], I-Worm.Bagle, WORM_BAGLE.A
 
Traits:

This worm spreads via e-mail and has a random filename, with an .exe extension.  The worm uses its own SMTP engine to send itself to e-mail addresses found on the infected machine.  The worm spoofs the "From" field in emails it sends, which means that it may appear to have come from someone you know.

The message appears as follows:

***********************************************************

Subject line: Hi

Message text:
Test =)
[random characters]
--
Test, yep.

Attached file: <random name>.exe



----- Original Message -----
Sent: Wednesday, January 28, 2004 2:18 PM
Subject: RE: [DUG]

Errr....
 
MyDoom/Novarg virus?
 


From: Ross Levis [mailto:[EMAIL PROTECTED]
Sent: Wednesday, January 28, 2004 2:11 PM
To: NZ Borland Developers Group - Delphi List
Subject: [DUG]

Is everyone getting lots of returned undeliverable mail today from messages supposedly sent from your email address?
 
Ross.


_______________________________________________
Delphi mailing list
[EMAIL PROTECTED]
http://ns3.123.co.nz/mailman/listinfo/delphi
_______________________________________________
Delphi mailing list
[EMAIL PROTECTED]
http://ns3.123.co.nz/mailman/listinfo/delphi

Reply via email to