New Bagle Worm Variant Spreading Fast

Post by **117** » Tue Mar 01, 2005 6:30 pm

NAME: Bagle.BB
ALIAS: Email-Worm.Win32.Bagle.bb, Email-Worm.Win32.Bagle.pac

Summary

This trojan dropper appeared on March 1st, 2005. The dropper is sent by Bagle.be worm as an attachment to its infected e-mails. The dropper is sent inside a ZIP archive. The distribution was quite high, so we set Radar Level 2 for this dropper.

The dropped trojan is detected as Email-Worm.Win32.Bagle.bb.

This variant would appear to cause quite a lot of damage if you get infected with it, full details here

Post by **fac51** » Tue Mar 01, 2005 11:20 pm

Nortons outbreak alert sent pop up aplenty about this last night

Post by **117** » Tue Mar 01, 2005 11:23 pm

thought you turned off outbreak alerts on your machine? F-Secure notified me, that's where i got my info from

Post by **fac51** » Tue Mar 01, 2005 11:26 pm

no i just removed NIS 2005 from my main machine and stuck it on the other one where it can outbreak alert all it wants

Post by **117** » Tue Mar 01, 2005 11:27 pm

ah right