F-Secure Virus Descriptions : Bagle.EQ

Summary

This Bagle-related downloader appeared on November 23rd, 2005. It was downloaded from one of the URLs that Bagle downloaders are monitoring. This downloader downloads and runs a file from the 'www.anjely.com' website. The file is the Bagle mass-mailer that sends out ZIP archives with Bagle.EP downloader:

http://www.f-secure.com/v-descs/bagle_ep.shtml

The description of Bagle mass-mailer itself can be found here:

http://www.f-secure.com/v-descs/bagle_er.shtml

Detection

F-Secure Anti-Virus detects this malware starting from the following update:

[FSAV_Database_Version]

Version=2005-11-23_05

Back to the Top

Writeup: Alexey Podrezov, November 23rd, 2005;

F-Secure Corporation