I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
Worm Bagle
SHA256: 26047e275a377c84cecd5c9961d5eec6955a06c39b9e107c0ff4a679724bdd55
SHA1: 502ccf1116cb07b55145dedb5e34132aa75a160f
MD5: 8b4e37d50e8d559f7190381fb35c317e
File size: 22106 bytes
Created files:
%Program Files Common%\Microsoft Shared\ACDSee 9.exe – Worm Bagle
%Program Files Common%\Microsoft Shared\Adobe Photoshop 9 full.exe – Worm Bagle
%Program Files Common%\Microsoft Shared\Ahead Nero 7.exe – Worm Bagle
%Program Files Common%\Microsoft Shared\Matrix 3 Revolution English Subtitles.exe – Worm Bagle
%Program Files Common%\Microsoft Shared\Microsoft Office 2003 Crack, Working!.exe – Worm Bagle
%Program Files Common%\Microsoft Shared\Microsoft Office XP working Crack, Keygen.exe – Worm Bagle
%Program Files Common%\Microsoft Shared\Microsoft Windows XP, WinXP Crack, working Keygen.exe – Worm Bagle
%Program Files Common%\Microsoft Shared\Opera 8 New!.exe – Worm Bagle
%Program Files Common%\Microsoft Shared\Porno pics arhive, xxx.exe – Worm Bagle
%Program Files Common%\Microsoft Shared\Porno Screensaver.scr – Worm Bagle
%Program Files Common%\Microsoft Shared\Porno, sex, oral, anal cool, awesome!!.exe – Worm Bagle
%Program Files Common%\Microsoft Shared\Serials.txt.exe – Worm Bagle
%Program Files Common%\Microsoft Shared\WinAmp 5 Pro Keygen Crack Update.exe – Worm Bagle
%Program Files Common%\Microsoft Shared\WinAmp 6 New!.exe – Worm Bagle
%Program Files Common%\Microsoft Shared\Windown Longhorn Beta Leak.exe – Worm Bagle
%Program Files Common%\Microsoft Shared\Windows Sourcecode update.doc.exe – Worm Bagle
%Program Files Common%\Microsoft Shared\XXX hardcore images.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\ACDSee 9.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\Adobe Photoshop 9 full.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\Ahead Nero 7.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\Matrix 3 Revolution English Subtitles.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\Microsoft Office 2003 Crack, Working!.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\Microsoft Office XP working Crack, Keygen.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\Microsoft Windows XP, WinXP Crack, working Keygen.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\Opera 8 New!.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\Porno pics arhive, xxx.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\Porno Screensaver.scr – Worm Bagle
%Program Files%\Movie Maker\Shared\Porno, sex, oral, anal cool, awesome!!.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\Serials.txt.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\WinAmp 5 Pro Keygen Crack Update.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\WinAmp 6 New!.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\Windown Longhorn Beta Leak.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\Windows Sourcecode update.doc.exe – Worm Bagle
%Program Files%\Movie Maker\Shared\XXX hardcore images.exe – Worm Bagle
%SysDir%\sys_xp.exe – Worm Bagle
Worm Bagle created autostart registry keys:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\key: %WinDir%\System32\sys_xp.exe