Skip to content

J-Security Center

Latest Attack Object Updates
  • IDP Daily Update #1254
    posted: 09/05/08
  • NSM Daily Update #1254
    posted: 09/05/08
  • Deep Inspection 5.3r5 and above, 5.4, 6.0 #1254
    posted: 09/05/08
  • Deep Inspection 5.1, 5.2, 5.3r4 and below #1252
    posted: 09/05/08
  • Deep Inspection 5.0 #1132
    posted: 04/01/08
  • Antivirus
    posted: 09/05/08

Email-Worm.Win32.Bagle.cx-dw


19 Sep 2005 19:05:00 +0300

Kaspersky Lab has registered a mass mailing of a number of new Bagle variants Bagle.cx – Bagle.dw. Infected emails containing these Bagles were sent between 17:30 September 19 and 10:00 September 21 (GMT +3).

Detailed descriptions are available for variants Bagle.cy and Bagle.da. Please note that if a machine is infected by Bagle.da (and some later versions) the worm prevents the local machine from launching Kaspersky Anti-Virus. Infections are possible only if the anti-virus is turned off or if the databases have not been updated.

Removal instructions in cases where Bagle blocks Kaspersky Anti-Virus are included in the description of Bagle.da.

Kaspersky Lab antivirus databases have been updated to protect users against all new versions of Email-Worm.Bagle. We strongly urge all users to update their antivirus databases as soon as possible.