02-18-2004, 11:27 AM
http://securityresponse.symantec.com/avcen...eagle.b@mm.html
<b>W32.Beagle.B@mm</b>
W32.Beagle.B@mm is a mass-mailing worm that opens a backdoor on TCP port 8866. The worm uses its own SMTP engine for email propagation. It can also send the attacker the port on which the backdoor listens and a randomized ID number.
The email has the following characteristics:
From: <spoofed>
Subject: ID <random characters>... thanks
Attachment: <random characters>.exe
<b>W32.Beagle.B@mm</b>
W32.Beagle.B@mm is a mass-mailing worm that opens a backdoor on TCP port 8866. The worm uses its own SMTP engine for email propagation. It can also send the attacker the port on which the backdoor listens and a randomized ID number.
The email has the following characteristics:
From: <spoofed>
Subject: ID <random characters>... thanks
Attachment: <random characters>.exe