WORM_BAGLE.GM

This worm usually arrives as a file dropped by other malware or as a file downloaded unknowingly by a user when visiting malicious Web sites. Upon execution, it drops files a file detected by Trend Micro as TROJ_BAGLE.GEN.

It propagates by dropping copies of itself to folders it assumes as shared. It does the said routine by searching for folders with the string shared in the folder name. it then drops copies of itself whose file names masquerade as popular applications. It is possible for this worm to propagate via peer-to-peer file-sharing applications (P2P) when it drops copies of itself into shared folders of P2P applications.

Related Items