F-Secure Downloader Information Pages : Bagle.FE [Summary] | [Detection] Name: Bagle.FE Alias: W32/Bagle.FE Size: 9042 Category: Downloader Platform: Win32 Date of Discovery: December 22, 2005 Summary This Bagle-related downloader appeared on December 22nd, 2005. It was spammed in e-mails to a large amount of people as DFC00027.EXE. Like in previous cases, the downloader was sent inside a ZIP archive. The mass-mailer for this trojan downloader was uploaded to one of the websites that are monitored by older Bagle downloaders. We already detect the new mass-mailer as 'Email-Worm.Win32.Bagle.ex' and it appears to be a minor variant of Bagle.EY worm. Detection Bagle.FE is detected with the following F-Secure Anti-Virus updates: [FSAV_Database_Version] Version = 2005-12-22_03 Back to the Top Write-up: Alexey Podrezov, December 22, 2005 F-Secure Corporation