Virus alert! Bagle worm spreading through spam09 March 2005
Antivirus companies like Sophos, have reported that there is a new Trojan horse being spread through spam.
Up to 15 variants of the Troj/BagleDl-L Trojan horse has been deliberately released to email addresses across the world and samples seen so far include a 'zip' attachment which, when opened, includes a program file named "doc_01.exe" or "prs_03.exe".
If opened, some of the effects of the Bagle worm are:
- The Trojan connects to other websites to download more malious code.
- It tries to stop various antivirus and firewall software from loading by renaming the files.
- It blocks access to a range of security websites by changing the Windows HOSTS file.
Measures you can take to avoid the Trojan affecting your business are:
- Do not open suspicious emails or attachments. The worm will affect you only if you open the attachment.
- Notify your staff. Being aware is one of best safety measures.
- Set up a firewall and antivirus software.
- Back up your data.