Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It notifies its author that the affected computer is reachable through the port 8866. It stops functioning after February 25, 2004.|
|First detected on:||Feb. 17, 2004|
|Detection updated on:||March 6, 2006|
|Yes, using TruPrevent Technologies
Bagle.B is a worm that spreads via e-mail in a message with the subject ID <random text>... thanks, and an attached file that has the same icon as a WAV audio file.
Bagle.B attempts to connect to several web pages that host a PHP script. By doing this, Bagle.B notifies its author that the affected computer can be accessed through the port 8866.
This worm only runs if the system date is February 25, 2004 or previous. After this date, Bagle.B stops functioning.
Bagle.B is easy to recognize, as it reaches the computer in an e-mail message with the following characteristics:
When the attached file is run, Bagle.B opens the Windows Sound Recorder:
Then, it displays the following error message on screen: