"Bagle.AT arrives in email as a packed executable. Bagle.AT can also spread with a prepended Windows Control Panel Applet (CPL) stub (see info below).
If system date is Apr 25th, 2006 the worm uninstalls itself from the infected system by deleting its startup key in the Registry and terminating its own process.
This worm uses several different icons for the attachments it sends, such as these: "
The world is full of beauty if the heart is full of love
