F-Secure Email Worm Information Pages : Bagle.FC [Summary] | [Detection] Name: Bagle.FC Alias: Email-Worm.Win32.Bagle.ex, W32/Bagle.FC@mm Size: 20525 Category: Email Worm Platform: Win32 Date of Discovery: December 20, 2005 Summary This Bagle mass-mailer was found on December 20th 2005. It is a minor variant of Bagle.EY mass-mailer. It sends out the trojan downloader that we detect as W32/Bagle.FB. The downloader is sent out in e-mail messages with ZIP archive attachments. The name of the downloader's files inside those archives is S3700026.EXE. The Bagle.FC mass-mailer is downloaded from a website by the second level Bagle-related downloader that we detect as Bagle.FD. Detection Bagle.FC is detected with the following F-Secure Anti-Virus updates: [FSAV_Database_Version] Version = 2005-12-20_04 Back to the Top Write-up: Alexey Podrezov, December 20, 2005 F-Secure Corporation