Bagle Strikes again

FOR IMMEDIATE RELEASE
(Free-Press-Release.com) December 17, 2005 --
Alice, Anna or Susan, This Trojan Has Some Pretty Names!


A new variant of the Bagle Trojan horse is found to be proliferating through widespread spamming. Troj/BagleDl-AN trojan comes to your mailbox with an attachment named Alice, Anna, Susan etc containing a venomous file called S3700020.EXE. The message body of some mails, reads "New Year's Day",


What it does

Once you run the file, it copies itself to the Windows system folder by the name ANTI_TROJ.EXE. Infiltrating further into the windows system, it smartly tricks the user by displaying an image "NTIMAGE.GIF" using the default image viewer, by making him/her believe that the execution of the file only opens an image file.



The BagleDl-AN tries to download a file from various sites.This file is saved in a folder named EXEFLD in Windows folder.


Resolution

Timely updates of Microworld products will enable you keep off this breed of threats. More info can be found at http://mwti.net/virus_info/virusalertd.asp?vid=794


About MicroWorld

MicroWorld ( http://www.mwti.net ) is the publisher of the world's first real-time anti-virus and Content Security software, eScan and MailScan, for desktops, file servers, Citrix servers, proxy servers and Mail servers. MicroWorld Winsock Layer (MWL) is the revolutionary technology underlying these products, powering them to several certifications and awards by some of the most prestigious testing bodies, notable among them are Virus Bulletin, Checkmark, TUCOWS, Advanced CheckVir, Red Hat Ready,and Novell Ready.