W32/Bagle.EV Worm

 Information about the W32/Bagle.EV Worm:

W32/Bagle.EV is a worm. The worm will infect Windows systems and spreads through email.

The subject of the infected mail will be be any one of the following;

2006 Winter Games in Torino
FREE OLYMPIC TICKETS LOTTERY!
2006 Torino Winter Games FREE Tickets

The body of the infected mail will be any one of the following;

The Torino Winter games will be the most celebrated Olympics of our era. If you are looking to witness this historic event for yourself, look no further. SuperTicketing Premium Seating is your source for Olympics tickets. We have access to tickets for nearly every Olympic event from Opening to Closing Ceremonies, Curling to Figure Skating.

FREE TICKECKS AVAILABLE NOW ON LOTTERY BASIS. CHECK ATTACHED FILE.

DISCLAIMER
TickCo Premium Seating buys and resells tickets on the secondary market at above face value. Our prices can be substantially higher than the original ticket price, as they reflect the cost of obtaining premium seating. Any trademarked terms that appear on this page are used for descriptive purposes only.

Attention: you recieved free ticket invitation with attachment!

Coast to Coast Tickets provides the most comprehensive inventory of Opening Ceremony tickets available on the secondary market. If the Opening Ceremony tickets you are looking for are not available, please check back as our inventory is constantly updated. Orders for Opening Ceremony tickets that are no longer available will be cancelled or substituted at the customer's discretion. All Opening Ceremony tickets are shipped via Federal Express.

If you would like to attend a Opening Ceremony event to see athletes live, or to see a team schedule and information, Coast to Coast Tickets is your source. All it takes is a phone call or a few clicks of the mouse to buy Opening Ceremony tickets. We offer a wide selection of Winter Games tickets for all teams, and we are happy to provide information about schedules at any time.

Our company (TicketWorld) is the world's largest supplier of tickets to all major international events including the 2006 Winter Games and 2006 Torino Tickets. We sell tickets to every sporting event in Torino including the preliminary competitions as well as Olympic Finals tickets. You can order Winter Games tickets for all categories for every match. All Winter Games tickets are guaranteed 200%.

All ticket prices are in US Currency ($).

OPEN ATTACHMENT ARCHIVE TO GET INFORMATION HOW TO OBTAIN A FREE TOCKET.

Please call our United States office at +1.512[BLOCKED] or from the United Kingdom 0800.[BLOCKED] if you have questions.

The name of the infected attachment will be any one of the following;

Generated_bill.exe
Order_details.exe
Service_receipt.exe

Upon execution, the worm copies itself as lsamgr.exe in Windows System folder.

It also drops lsamgr.exeopen and lsamgr.exeopenopen in Windows System folder.

The worm modifies registry at the following location to load itself during each startup.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

To propagate itself, the worm scans the following extensions and collects the available email addresses from the infected system;

sht, pl, mmf, cfg, dbx, cgi, asp, adb, dhtm, eml, htm, jsp, mbx, mht, mdx, msg, nch, ods, oft, php, shtm, stm, tbb, txt, uin, wab, wsh, xls and xml.

This worm first appeared on February 13, 2006.

 Other names of W32/Bagle.EV Worm:

This Worm is also known as WORM_BAGLE.EV .