Email-Worm.Win32.Bagle.cx-dw
19 Sep 2005 19:05:00 +0300
Kaspersky Lab has registered a mass mailing of a number of new Bagle variants Bagle.cx – Bagle.dw. Infected emails containing these Bagles were sent between 17:30 September 19 and 10:00 September 21 (GMT +3).
Detailed descriptions are available for variants Bagle.cy and Bagle.da. Please note that if a machine is infected by Bagle.da (and some later versions) the worm prevents the local machine from launching Kaspersky Anti-Virus. Infections are possible only if the anti-virus is turned off or if the databases have not been updated.
Removal instructions in cases where Bagle blocks Kaspersky Anti-Virus are included in the description of Bagle.da.
Kaspersky Lab antivirus databases have been updated to protect users against all new versions of Email-Worm.Bagle. We strongly urge all users to update their antivirus databases as soon as possible.
