Troj/Dloadr-MH is a Trojan for the Windows platform.
Troj/Dloadr-MH includes functionality to access the internet and communicate with a remote server via HTTP.
W32/Bagle-DS is a mass-mailing worm and backdoor Trojan for the Windows platform.
W32/Bagle-DS spreads via file sharing on P2P networks and via email.
W32/Bagle-DS runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer.
W32/Bagle-DS will harvest email addresses found on the infected computer to the clean text file <Windows>\vcremoval.dll and send itself to these addresses with the following email characteristics:
Subject (one of the following):
Lawsuit against you
Call to your lawer immidiately
Pay your debts before we come to you
We wait your response.
Message text (starts with one of the following):
LAWSUIT AGAINST YOU (CLICK TO ATTACHED DOCUMENT FOR MORE INFORMATION)
Tucker's Fix-It-Quick Garage
LAWSUIT AGAINST YOU (CLICK TO ATTACHED DOCUMENT FOR MORE INF ORMATION)
To Whom It May Concern:
On 02, 2006, you sent a facsimile (the Fax) to my facsimile machine that is
connected to my telephone number 678-5713-1571.
LAWSUIT AGAINST YOU (ATTACHMENT HAS MORE INFORMATION)
1550 Peachtree Street
Atlanta, GA 30309
Attachment name (one of the following):
W32/Bagle-DS includes functionality to access the internet and communicate with a remote server via HTTP.
When first run W32/Bagle-DS copies itself to <System>\win32lib.exe, <System>\win32lib.exeopen and <System>\win32lib.exeopenopen, as well as to any folder whose name contains the word 'shar' using the following filenames:
Adobe Photoshop 9 full.exe
Ahead Nero 10.exe
anna benson sex video.exe
barrett jackson nude photos, movies, porn video.exe
Britney Spears sex photos.exe
IE beta 7.exe
jenna elfman sex anal deepthroat.exe
kate beckinsale nude pictures.exe
miss america Porno, sex, oral, anal cool, awesome!!.exe
paris hilton Porno pics arhive, xxx.exe
Serials 2005 database.exe
Windown Vista Beta Leak.exe
Windows Sourcecode update.doc.exe
XXX hardcore images.exe
W32/Bagle-DS contains the following text:
In a difficult world
In a nameless time
I want to survive
So, you will be mine!!
-- Bagle Author, 29.04.04, Germany.