Protect your corporate IT network from hackers and other unwanted intruders with Proxy Sentinel™. Click here for all the details and get the peace of mind you deserve.
Back to our Homepage Proxy Sentinel™ high performance Internet proxy server and secure firewall solution Firewall Sentinel™ secure & powerful Internet firewall solution About Internet Security.ca and GCIS Frequently Asked Questions on Internet security issues Internet Security Industry News - Stay informed of what's happening Contact Internet Security.ca today and order your Proxy Sentinel™ or Firewall Sentinel™ server now!


Bagle.a virus starting to slow down

Save your company's valuable data with Proxy Sentinel™ from Internet Security. Click here for all the details.

January 21, 2004

Bagle.a, the first major mass-mailing computer virus this year, is starting to slow down after infecting hundreds of thousands of computers, security experts said on Tuesday. The worm is programmed to stop contaminating computers on Jan. 28, but seems destined to drop off the security industry's radar before that date. The program spreads through e-mail and infects the PCs of people who open the attachment.

"It peaked yesterday, and it's starting to die down," said Vincent Weafer, the senior director of security response for antivirus company Symantec. "It doesn't compare to many of the mass-mailers that we saw last year."

The number of customers reporting a Bagle infection has declined since Monday, according to Weafer. Network Associates, a rival antivirus company, said it had an almost 40 percent fall in the number of reports received from its customers.

Despite the drop-off, concerns remain that Bagle--which seems patterned on last year's most effective virus, Sobig--is just the first of a series of programs that will become more effective at attacking PCs with each new version.

In addition, PCs infected with Bagle.a, also known as Beagle.a, may already have had other programs installed on their system by the virus, uploaded from a Web site that has since been closed down. Bagle attempts to install the Mitglieder network proxy program, which allows intruders and spammers access to a victim's PC, in addition to trying to upload a password-stealing program.

Half the hundreds of thousands of computers infected by Bagle are in China, Korea, the United States and Australia, according to data compiled by F-Secure, a Finnish antivirus company.

The surprise for many security experts is that the current Bagle virus has spread so widely.

"It is surprisingly effective, considering it has no social engineering whatsoever," said Paul Wood, the chief information security specialist at MessageLabs, an e-mail service provider. "There is no attempt to disguise it, yet people are still opening it, which is kind of bizarre, because it shows that education about not opening attachments isn't as widespread as we hoped."

MessageLabs, which filters out spam and viruses from e-mail for clients, said it has stopped nearly 150,000 copies of the Bagle virus since Sunday--about 1 in every 136 messages processed by the company.

While security experts believe that Bagle was written from scratch, the program's blueprint is similar to that of the Sobig virus, which started attacking computers a year ago. Like Sobig, Bagle uses its own home-brewed e-mail program to send messages quickly, rather than use the e-mail functions built into Microsoft Outlook, for example.

"This virus really has the characteristics of everything we have seen over the last year," said Vincent Gullotto, a vice president in Network Associates' antivirus emergency response team. "Rather than grabbing Sobig or Mimail and working with that, the writer creates a totally new virus."

Source: C-Net News


Save Internet Security.ca's URL to the list of your favorite web sites in your Web browser by clicking here.

Become an authorized reseller of Proxy Sentinel™ and Firewall Sentinel™. Do like the rest of our authorized resellers and have your clients benefit the important security features of our products and solutions, while increasing your sales at the same time. Click here for all the details.


Back to the top of the page.         

You can link to the Internet Security web site as much as you like. Read our section on how your company can participate in our reciprocal link exchange program and increase your rankings in the major search engines such as
Google and all the others.

Click here to order your Proxy Sentinel™ Internet security server today!

Proxy Sentinel™ is the most secure Internet proxy server on the market today. Click here for more information.
Site optimized by Pagina+™
Powered by W.Web H.
Search engine keywords by Rank for Sales
Development platform by My Web Services
Internet Security.ca is listed in
Global Business Listing

| Home | Proxy Sentinel™ | Firewall Sentinel™ | FAQ | News | Sitemap | Contact |
Copyright © Internet Security.ca 2003    Terms of use    Privacy agreement    Legal disclaimer