F-Secure Virus Descriptions : Bagle.CK

Summary

Another new Bagle variant - Bagle.CK has been found on August 12th, 2005. This variant is very similair to previous variant, Bagle.BY. Bagle.CK comes inside a ZIP archive containing file 'Taxes.exe'. The name of the ZIP archive can vary, but is somehow Tax-related, for example 'Increase_in_the_tax.zip'.

Instead of picture icon, Bagle.CK uses text file icon. Also, instead of opening mspaint.exe, Bagle.CK executes notepad.exe.

For more details, see description of Bagle.BY: http://www.f-secure.com/v-descs/bagle_by.shtml

Detection

F-Secure Anti-Virus detects Bagle.CK starting from the following update:

[FSAV_Database_Version]

2005-08-12_05

Back to the Top

Technical Details: Jarkko Turkulainen Aug 12th, 2005;

F-Secure Corporation