Removing Win32/Bagle.HE worm

Paul15 Replies

Here is another virus that seems to be spreading lately.   From the looks of it, it sees to be another email worm.  Here is what eset says:

Aliases

Email-Worm.Win32.Bagle.gt (Kaspersky), W32/Bagle.gen (McAfee), Trojan.Tooso!gen (Symantec)

[ad#ad2-right]Win32/Bagle.HE is a worm that spreads via e-mail. The size of its executable is 40565 B .

When executed the worm copies itself in the following locations:

  • Documents and Settings\All Users\Application Data\hidn\
    hldrrr.exe

  • Documents and Settings\All Users\Application Data\hidn\
    hidn2.exe

In order to be executed on every system start, the worm sets the following Registry entry:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\drv_st_key

[ad#ad2-left]It seems to have a manual removal process, Unless you pay for the other software but according to the 411 on PC Security:

Win32/Bagle.HE worm is a “threat” that appears in security scans by fake antispyware WinDefender 2008.

The danger of Win32/Bagle.HE worm is supposed to scare you into wasting $49.95 on WinDefender 2008.

Unless you like getting ripped off, don’t download the software the Win32/Bagle.HE worm popup links to. You’re not really infected with Win32/Bagle.HE worm — you’re infected with scamware that you need to remove.

I’ll show you how to get rid of Win32/Bagle.HE worm and WinDefender 2008, for free.

[via 411 on PC Security]

According to this site you can remove it by doing some steps.  I think Kaspersky has an easier way to remove it and it looks like most anti-virus software will remove this.   You need to remember that only you can prevent this from the future.   You should also update your windows update and make sure your system is up to date.

15 Comments

  2. Yep they seem to like to make viruses and spyware. It has to do with operating systems patching KNOWN holes and the hackers want on your so they have to find new ways to do it!!

  3. Which email app do you think is the safest to use? Do you think iMail because Macs are not hit as hard with viruses and worms like PCs? Or it doesn't matter?

  4. I think it does matter, you see sooner or later hackers are going to turn to the mac because of how APPLE is reluctant to patch the system. I suggest using:
    http://en-us.www.mozilla.com/en-US/thunderbird/all.html“ rel=”nofollow”>http://en-us.www.mozilla.com/en-US/thunderbird/…

    They Have Linux, Windows, and Mac versions. It is open source so it will be patched really quickly and I always think it is the most secure right now!!! That could change in the future but for right now it is.

  7. Yep they seem to like to make viruses and spyware. It has to do with operating systems patching KNOWN holes and the hackers want on your so they have to find new ways to do it!!

  8. Which email app do you think is the safest to use? Do you think iMail because Macs are not hit as hard with viruses and worms like PCs? Or it doesn't matter?

  9. I think it does matter, you see sooner or later hackers are going to turn to the mac because of how APPLE is reluctant to patch the system. I suggest using:
    http://en-us.www.mozilla.com/en-US/thunderbird/all.html“ rel=”nofollow”>http://en-us.www.mozilla.com/en-US/thunderbird/…

    They Have Linux, Windows, and Mac versions. It is open source so it will be patched really quickly and I always think it is the most secure right now!!! That could change in the future but for right now it is.

  12. Yep they seem to like to make viruses and spyware. It has to do with operating systems patching KNOWN holes and the hackers want on your so they have to find new ways to do it!!

  13. Which email app do you think is the safest to use? Do you think iMail because Macs are not hit as hard with viruses and worms like PCs? Or it doesn't matter?

  14. I think it does matter, you see sooner or later hackers are going to turn to the mac because of how APPLE is reluctant to patch the system. I suggest using:
    http://en-us.www.mozilla.com/en-US/thunderbird/all.html“ rel=”nofollow”>http://en-us.www.mozilla.com/en-US/thunderbird/…

    They Have Linux, Windows, and Mac versions. It is open source so it will be patched really quickly and I always think it is the most secure right now!!! That could change in the future but for right now it is.

Comments are closed.