Another new Bagle variant - Bagle.CH has been found on August 11th, 2005.
This variant is very similair to previous variant, Bagle.BY. Bagle.CH
comes inside a RAR archive containing file 'Taxes.exe'. The name of the
RAR archive can vary, but is somehow Tax-related, for example
'Increase_in_the_tax.rar'. Instead of picture icon, Bagle.CH uses text
file icon.
For details, see description of Bagle.BY:
http://www.f-secure.com/v-descs/bagle_by.shtml
And the discussion in our weblog: www.f-secure.com/weblog/archives/archive-082005.html#00000622
F-Secure Anti-Virus detects Bagle.CH starting from the
following update:
[FSAV_Database_Version]
2005-08-12_01
Technical Details:
Jarkko Turkulainen Aug 12th, 2005;
F-Secure Corporation
