Computer Question: New Bagle Worm Variant

self

[hsmomx3]

I was told that the New Bagle Worm Variant can run without launching an attachment.

I'm a little confused. How do you actually get this if you don't open email attachments?

And if I am using a browser other than IE, am I still susceptible?

[Hurricane Andrew]

It exploits an html vulnerability that initiates an automatic download of a file at a remote location. It is explained very well here (you have to click on the Beagle.T threat at the top left):

http://www.symantec.com/avcenter/

Hope this helps...

[MediaMole]

Install and run the free firewall Zone Alarm

The free version is great. You don't need the paid versions of Zone Alarm Plus or Pro. It will keep malicious programs from accessing the internet from your computer or malicious programs on the internet from getting access to your computer.

It isn't very difficult to set up and combined with a good antivirus program and a good anti-spyware program, will help keep your computer safe.

[TomGuy]

You might check this link about the New Bagle Variant

http://www.esecurityplanet.com/alerts/article.php/3320291

[mlbford2]

I could be wrong but I don't think that is correct. To get any mail virus, an attachment would have to be open. An executablel program has to download onto your computer. A worm,etc is just a program. That program has to be launched somehow. All programs I am aware of that can cause damage to your computer are to large not to be sent as an attachment. Your mail server will not open it unless it is directed to by clicking on the attachment. This is my opinion based on what I know. Maybe someone else has a better answer.

[wildbill]

I read today that the hacker program exploits Active X controls which actually do allow an outside computer to access your computer without an attachment.

For example, I use McAfee's online service which automatically accesses my computer, opens my anti-virus program and downloads new code to fight new worms and viruses. Another example would be the Microsoft XP feature that allows consenting computers to access each other for analysis and repairs.

The good news is I can't afford broadband, so no self-respecting hacker would want anything to do with my system; the bad news is I can't afford broadband.

[UnklGene]

Thanks!

[UnklGene]

Thanks!

[hsmomx3]

I just did some XP critical updates a few weeks ago and I thought one of them was for this. ActiveX--isn't that something that is used in IE? Netscape doesn't use ActiveX, does it?

[snooker]

When I have software that consistently remains a security risk, I get rid of the software. With MSIE it's time.

Use mozilla instead. Opera also has a nice browser which is quite safe.

[WaterDragon]

Go to http://grc.com/default.htm
Scroll down to "ShieldsUp!" and click
Follow directions and the program will check to see if your computer is compromised.

All free, very reputable man is our Gibson!

Get ZoneAlarm!

[xrp]

All free, very reputable man is our Gibson!

Ok, right...

GRC Sucks

[WaterDragon]

So? There are people who don't like Gibson? Why? Because most of his site if free? Get over it. A bunch of hackers don't like Gibson! Ta-da.