W32.Beagle.AH@mm mass-mailing worm:
W32.Beagle.AH@mm mass-mailing worm:
Uses its own SMTP engine to spread through email.
The email will have a variable subject and a file attachment, which will have a .com, .cpl, .exe, .hta, .scr, .vbs, or .zip file extension.
Opens a backdoor on TCP port 1234.
Is functionally similar to W32.Beagle.X@mm, and is packed with UPX.
Type: Worm
Infection Length: about 16K
Systems Affected: Windows 2000, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Macintosh OS X, Novell Netware, OS/2, UNIX
[symantec.com]