Re: [What it is]

[Guest guest]

Subject: re: [What is BEAGLE]

,

Yes, another NASTY mass mailing worm that is very much out in the wild now.

I just posted the link for the removal tool and instructions in case one of

the

family gets bit. Hope no one does. My mother got infected and it as much

as shut down her Internet connection due to the massive amount of email

being

sent from her computer. There is NO 'attachment' with this nasty bugger.

One

just has to open it, or have their preview pane function turned on in their

mail

program.

It has a SUBJECT line which just says: Hi

If you open the email with the subject: Hi - your computer will become

infected.

ALSO,

If you have preview pane turned on, by the time the infected email is loaded

by your server into your Inbox, the worm will self-execute if the file is

highi-lighted

and it will infect your computer.

To turn off

> ... Go to Outlook Express

> ... Click on View

> ... Click on Layout

> ... Remove check mark from Show Preview Pane

> ... Click Apply, and then OK

J:O)hn

>

>

>

>

>

>

> .

> REPEAT [Off Topic] if the 'BEAGLE' bites

> >

> >

> > > W32.Beagle.A@mm

> > > MASS MAILING WORN - REMOVAL TOOL

> > > A,B,C,E,F,G,H,I,J,K

> > >

> > > Download the FxBeagle.exe file (removal tool from Symantec) from

> > > http://securityresponse.symantec.com/avcenter/FxBeagle.exe

> > >

> > > 1. Save the file to a convenient location, such as your Windows

> > desktop,

> > > or removable media (floppy disc).

> > > 2. Close all the running programs before running the tool.

> > > 3. If you are on a network or if you have a full-time connection to

> the

> > > Internet, disconnect the computer from the network and the

> > Internet.

> > > 4. If you are running Windows Me or XP, then disable System

Restore.

> > > Refer below for details.

> > >

> > > How to disable or enable Windows Me System Restore

> > >

> >

>

http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239?OpenDo\

cument&src=sec_doc_nam]

> > >

> > > How to turn off or turn on Windows XP System Restore

> > >

> >

>

http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDo\

cument&src=sec_doc_nam

> > >

> > > Caution: If you are running Windows Me/XP, we strongly recommend that

> you

> > do

> > > not skip the above step!

> > >

> > > 5. Double-click the FxBeagle.exe file to start the removal tool.

> > > 6. Click Start to begin the process, and then allow the tool to

run.

> > > 7. Restart the computer.

> > > 8. Me/XP - Run the removal tool AGAIN to ensure that the system is

> > clean.

> > > 9. If you are running Windows Me/XP, then re-enable System Restore.

> > > 10. Run an Update to make sure that you are using the most current

> virus

> > > definitions available for your virus software.

> > >

> > > Note: The removal procedure may not be successful if Windows Me/XP

> System

> > > Restore is not disabled as previously directed, because Windows

prevents

> > > the Removal Tool from modifying System Restore when it is left turned

> on,

> > > and hence there will still be a copy of the Virus stored in Windows

> > back-up,

> > > which will re-execute again on next startup.

> > >

> > > When the tool has finished running, you will see a message indicating

> > > whether the computer was infected by W32.Beagle.A@mm

> > >

> > > In the case of a removal of the worm, the program displays the

following

> > > results:

> > > a.. Total number of the scanned files

> > > b.. Number of deleted files

> > > c.. Number of repaired files

> > > d.. Number of terminated viral processes

> > > e.. Number of fixed registry entries

> > >

> > > Also, a logfile will appear on your Desktop with the above information

> in

> > > it.

> > > You can read and then delite the file after you have cleaned the

> > infection.

> > >

> > >

> > >

> > >

> > >

> > >

> > >

> > > To learn more about EDS, visit our website:

> > http://members.rogers.com/ceda2/

> > >