W32.Beagle.AB@mm

W32.Beagle.AB@mm is a mass-mailing worm that uses its own SMTP engine to spread through email and opens a backdoor on TCP port 1080.

The subject line, body, and attachment name of the email vary. The attachment will have a .com, .cpl, .exe, .scr, or .zip file extension.

The worm is packed with UPX.

Notes:

• Virus definitions dated prior to July 15, 2004 may detect this threat as Bloodhound.Packed.
• Virus definitions greater than version 60715av (extended version July 15, 2004, rev. 48) are required to detect this threat as W32.Beagle.AB@mm.

Protection

• Initial Rapid Release version July 15, 2004
• Latest Rapid Release version July 15, 2004
• Initial Daily Certified version July 15, 2004
• Latest Daily Certified version July 23, 2007 revision 035
• Initial Weekly Certified release date July 15, 2004

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Medium
• Number of Infections: 50 - 999
• Number of Sites: More than 10
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: High