W32.Beagle.AQ (aka Bagle) - Allerta 5 - Update

[Giorgius]

Aliases:
W32.Beagle.AO@mm (Symantec), W32/Bagle.AM.worm (Panda Software), W32/Bagle.aq@MM (McAfee), WORM_BAGLE.AC (Trend Micro), W32/Bagle.AQ@mm (PerAntivirus), Win32/Bagle.AI (Enciclopedia Virus (Ontinent)), Win32.Bagle.AG (Computer Associates), Win32/Bagle.AI (ESET (NOD32)), I-Worm.Bagle.al (AVP), W32/Bagle-AQ (Sophos), I-Worm.Bagle.al (Kaspersky (viruslist.com)), HTML_BAGLE.AC (Trend Micro), TROJ_BAGLE.AC (Trend Micro), Bagle.AL (F-Secure)

Effetti:
W32.Beagle.AO@mm is a mass mailing worm that uses its own SMTP engine to spread. The email attachment is a Mitglieder-like downloader that brings the worm from external sources.
The worm also has a backdoor functionality, opening UDP and TCP port 80.
Note: Virus definitions version 60809aj (extended version 8/9/2004 rev. 36) and greater are required to detect this threat. The respective LiveUpdate definitions which contain protection are version 60809ak (8/9/2004 rev. 37).

Info:
http://www.symantec.com/avcenter/ven...gle.ao@mm.html
http://www.f-secure.com/v-descs/bagle_al.shtml
http://www.viruslist.com/eng/alert.html?id=2011913
http://alerta-antivirus.red.es/virus....html?cod=4155
http://us.mcafee.com/virusInfo/defau...virus_k=127423
http://www.pandasoftware.es/virus_in...&idvirus=50777
http://www.pspl.com/virus_info/worms/bagleaq.htm
http://www.norman.com/Virus/Virus_descriptions/16605/en

[Giorgius]

Stinger 2.3.8: http://download.nai.com/products/mca...rt/stinger.exe
Ikarus: http://download.ikarus.at/remover/IkarusRem_Bagle.exe
BitDefender: http://www.bitdefender.com/html/free_tools.php