Bagle Variant Gains Momentum

Bagle Variant Gains Momentum

Written By
Dennis Fisher
Dennis Fisher
Feb 23, 2004
1 minute read
eWeek content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More

A new version of the Bagle virus is making the rounds of the Internet.

Known as Bagle.B, the virus is a mass-mailer like the original Bagle, and it includes a component that notifies the author each time a new machine is infected.

Anti-virus companies said they saw several dozen submissions of Bagle.B from customers early last week.

The new variant arrives in an e-mail with a spoofed sending address and a subject line that contains the term “ID” followed by a string of random characters. The text of the message simply says: “Yours ID” followed by another group of random characters.

The attachment is an executable file with a random file. Once the user executes the file, the virus mails itself to all the names found on the users hard drive, with the exception of addresses in the Hotmail, MSN, Microsoft and AVP domains.

Bagle.B also opens port 8866 and begins listening for remote connections, according to an analysis done by Network Associates McAfee AVERT team.

The virus also sends an HTTP notification, presumably to the author, notifying him that a machine is infected.

eWeek Logo

eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site's focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

Property of TechnologyAdvice. © 2026 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.