Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
Published Jun 21, 2006 | Updated Sep 15, 2017

Worm:Win32/Bagle.EG@mm

Detected by Microsoft Defender Antivirus

Aliases: W32/Bagle.fb@MM (McAfee) Win32/Bagle.EF (CA) WORM_BAGLE.FU (Trend Micro) Email-Worm.Win32.Bagle.fy (Kaspersky) W32/Bagle-KM (Sophos) Mitglied.gen (Norman)

Summary

Win32/Bagle.EG@mm is a mass-mailing worm that targets certain versions of Microsoft Windows. The worm sends itself as an attachment to e-mail addresses that it finds on the infected computer. The worm is sent in a password protected zip file along with the password for the user to unzip the file.  The worm monitors a random TCP port for instructions from remote attackers.
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as Microsoft Security Essentials, or the Microsoft Safety Scanner. For more information about using antivirus software, see http://www.microsoft.com/security/antivirus/av.aspx.
Follow us