What
is the Beagle.ag worm?
Also known as: WORM_BAGLE.AH, W32/Bagle.ai@MM,
W32/Bagle-AI, Win32.Bagle.AI
Bagle.AG is a worm that affects
Windows XP/2000/NT computers only. Bagle.AG
opens and listens to a TCP port, waiting for
remote connections. By doing so, it allows
hackers to gain remote control over the affected
computer in order to carry out malicious actions
that would compromise user's confidentiality or
impede normal work.
Bagle.AG ends processes belonging to
antivirus programs and firewalls, among others.
This leaves the affected computer vulnerable to
the attack of other malware.
Aditionally, this worm connects to several web
pages that contain a PHP
script.
It aslo eliminates the entries in the Windows
Registry belonging to several variants of
the worm Netsky.
Bagle.AG spreads via e-mail in a
message with variable characteristics and through
peer-to-peer file sharing programs (P2P).
How to Remove the Beagle.ag Worm?
If Kaspersky detects Bagle.AG during the scan, it
will AUTOMATICALLY offer you the option of
deleting it.
Finally, restore the original configuration of
your computer by following the instructions
below:
- Delete the entry that Bagle.AG has
created in the Windows Registry:
HKEY_CURRENT_USER\
SOFTWARE\ Microsoft\ Windows\ CurrentVersion\
Run
key = %sysdir%\ sysxp.exe
where %sysdir% is
the Windows system directory.
- Restart the computer.
- In order to make sure that Bagle.AG
is completely eliminated from your computer,
carry out a full scan of your computer using
Kaspersky.
How to Disinfect My Computer from Worms?
In order to keep your computer protected, bear
the following tips in mind:
- If you have filtering tools installed,
configure them to reject messages with the
characteristics described above. If, in spite
of doing this, you receive the message that
contains the virus: do not open it, do not run
the attached file and delete it, making sure
that you also delete it from the Deleted
Items folder.
- Install a good antivirus in your computer.
Select Kaspersky Internet Security to get the Kaspersky antivirus solution that best suits your needs.
- Keep your antivirus updated. If automatic
updates are available, configure your
antivirus to use them.
- Keep your permanent antivirus protection
enabled at all times.
Detect and Removal Instruction for Other
Variants:
| 
