The Bagle-AU worm can disable security applications, including the firewall built into Windows XP Service Pack 2.
Experts at Sophos have warned users that the new W32/Bagle-AU worm attempts to disable security software on infected Windows PCs.
“By turning off firewall protection and other security software the author of the latest incarnation of the Bagle worm is opening up computers to attack,” said Graham Cluley, senior technology consultant for Sophos. “Increasingly virus writers are aiming to take over innocent peoples’ computers in order to steal, spam or cause mischief.”
Sophos notes that the W32/Bagle-AU worm is capable of turning off the firewall built into Microsoft’s recent Windows XP Service Pack 2 update.
More in http://www.sophos.com/virusinfo/articles/bagleaufw.html