It notifies its author that the computer has been affected. It ends processes belonging to several security programs and to several worms.

Windows 2003/XP/2000/NT/ME/98

Bagle.AA is a worm that spreads via e-mail in a message with variable characteristics, and through peer-to-peer (P2P) file sharing programs.

Bagle.AA ends processes belonging to antivirus and firewalls programs, among other security applications, as well as to several worms.

In addition, it attempts to connect to several websites that host an PHP script through the port 2535. By doing so, Bagle.AA notifies its author that the computer has been affected.

Sometimes, Bagle.AA is easy to recognize as it reaches the computer in an e-mail message with one of the following images, with a JPEG extension:

In addition, Bagle.AA displays the following fake error message once it has affected the computer: