This WORM_BAGLE variant arrives on a system as an email attachment. It sends copies of itself to all email addresses it gathers from files with certain extensions but skips those addresses that contain particular strings.
Users must be wary of the email that it sends with the following details:
Subject: (any of the following)
Delivery service mail
Delivery by mail
Registration is accepted
Is delivered mail
You are made active
Message body: (any of the following)
Thanks for use of our software.
Before use read the help
Go to Trend Micro for details...