Welcome to the Virus Encyclopedia of Panda Security.
It creates a backdoor that opens TCP port 2745 and notifies its author that the affected computer is reachable through it. It stops functioning after March 25, 2005.
|Detection updated on:||April 15, 2004|
|Yes, using TruPrevent Technologies
Bagle.H is a worm that spreads via e-mail in a message with variable characteristics.
Bagle.H contains a backdoor, which opens the TCP port 2745. It attempts to connect to several web pages that host a PHP script. By doing this, Bagle.H notifies its author that the affected computer can be accessed through the port mentioned above.
In addition, Bagle.H ends the processes belonging to several antivirus update applications.
This worm only runs if the system date is March 25, 2005 or previous. After this date, Bagle.H uninstalls itself.
Bagle.H is easy to recognize once it has affected the computer, as it opens Notepad the first time it is run.